
Job Information
Deloitte BISO Manager in Harrisburg, Pennsylvania
BISO Manager
Location: Remote
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte's Information Technology Services (ITS). We are curious and life-long learners focused on technology and innovation.
Work you'll do
The BISO Manager role operates in the Business Information Security Officer (BISO) organization aligned to the Consulting business. The role requires close integration with various client-service leaders, technical and non-technical stakeholders. The role is responsible for driving adoption of cyber security policies, standards, and industry-leading practices within the Consulting business. In addition to leading cyber security projects and initiatives, this role will focus on driving security in cloud solutions development which includes working with all 3 major cloud platforms (AWS, Azure, GCP) and reviewing n-tier application architectures and technical design patterns.
Your skills will cover a range of cyber security areas and you will handle multiple projects and priorities simultaneously.
Responsibilities:
Socialize new cyber standards and manage discussions around potential adoption and implementation issues
Drive adoption of security best practices for deploying web and service-based applications in Windows/Linux environments on cloud VMs, containers, or serverless functions
Review complex security architectures to help gain consensus on infrastructure and data security issues with the business stakeholders
Provide guidance that balances business requirements with the firm's cyber security standards
Support cloud security monitoring and vulnerability remediation
Provide guidance on enterprise strategies for the adoption of new collaboration tools and business accelerator products
Drive testing, selection, and adoption of cyber tools for workstations as well as cloud VMs
Facilitate leadership level discussions on optimized deployment plans of new and evolving cyber tools to ensure minimal disruption to the consulting business line
Work with development teams to foster cyber security automation and secure CI/CD pipelines by providing guidance cloud automation and DevSecOps tools
Drive secured handling of PII or confidential data on Deloitte's cloud environments by working with various stakeholder groups, including Confidentiality & Privacy team
The team
Information Technology Services (ITS) helps power Deloitte's success. ITS drives Deloitte, which serves many of the world's largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence. The 2,500 professionals in ITS deliver services including Security, risk & compliance, Technology support, Infrastructure, Applications, Relationship management, Strategy, Deployment, PMO, Financials, and Communications.
Cyber Security
Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand. Cyber areas of focus include Cyber design, Risk & Compliance, Technology Risk Management, Identity & Access Management, Data Protection, Incident Response and Architecture.
Basic Qualifications
Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity or equivalent professional experience
Verifiable 6 years of experience in a solutions architecture, security leadership, or software development role
Working knowledge of cyber security practices and technologies including identity and access management (IAM), multi-factor authentication, encryption, IDS/IPS, firewall, end-point protection (AV, EDR), DLP, CASB, vulnerability management, and security information and event management (SIEM)
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
Preferred Qualifications
Superior communication (verbal and written), problem solving, collaboration, presentation, executive presence, and interpersonal skills
Capability to design and/or evaluate secure cloud-based solutions to include experience with cloud frameworks and security infrastructures in AWS, Azure, or GCP
Strong preference for experience working with scripting languages (Bash/Powershell), application development (JavaScript, Python, .NET, Docker), databases (RDS, SQL Server, Oracle), source control (GitHub, Bitbucket), CI/CD (Jenkins, Chef, Puppet, Ansible), test automation (Selenium, xUnit), and SAFe methodologies
Knowledge of information security regulatory requirements such as General Data Protection Regulation (GDPR), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry/Data Security Standards
Knowledge of common information security management frameworks, such as ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity Framework
Certifications
At least one cloud and one security certification from the following:
Cloud certifications:
AWS Certified Solutions Architect - Associate
AWS Certified Security Specialty
Google Associate Cloud Engineer
GCP Professional Cloud Security Engineer
Azure Solutions Architect
Azure Seurity Engineer Associate
Security Certifications:
Certified Cloud Security Professional (CCSP)
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor (CISA)
For individuals assigned and/or hired to work in Colorado, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to the State of Colorado and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and delivery model. We would not anticipate that the individual hired into this role would land at or near the top end of the range, but such a decision will be dependent on the facts and circumstances of each case. A reasonable estimate of the range is $ 115,555 to $ 192,590.
#EA_ExpHire
#EAITSExpHire
FY23CS540
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.