Deloitte Jobs

BISO Manager

Location: Remote

Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte's Information Technology Services (ITS). We are curious and life-long learners focused on technology and innovation.

Work you'll do

The BISO Manager role operates in the Business Information Security Officer (BISO) organization aligned to the Consulting business. The role requires close integration with various client-service leaders, technical and non-technical stakeholders. The role is responsible for driving adoption of cyber security policies, standards, and industry-leading practices within the Consulting business. In addition to leading cyber security projects and initiatives, this role will focus on driving security in cloud solutions development which includes working with all 3 major cloud platforms (AWS, Azure, GCP) and reviewing n-tier application architectures and technical design patterns.

Your skills will cover a range of cyber security areas and you will handle multiple projects and priorities simultaneously.

Responsibilities:

• Socialize new cyber standards and manage discussions around potential adoption and implementation issues

• Drive adoption of security best practices for deploying web and service-based applications in Windows/Linux environments on cloud VMs, containers, or serverless functions

• Review complex security architectures to help gain consensus on infrastructure and data security issues with the business stakeholders

• Provide guidance that balances business requirements with the firm's cyber security standards

• Support cloud security monitoring and vulnerability remediation

• Provide guidance on enterprise strategies for the adoption of new collaboration tools and business accelerator products

• Drive testing, selection, and adoption of cyber tools for workstations as well as cloud VMs

• Facilitate leadership level discussions on optimized deployment plans of new and evolving cyber tools to ensure minimal disruption to the consulting business line

• Work with development teams to foster cyber security automation and secure CI/CD pipelines by providing guidance cloud automation and DevSecOps tools

• Drive secured handling of PII or confidential data on Deloitte's cloud environments by working with various stakeholder groups, including Confidentiality & Privacy team

The team

Information Technology Services (ITS) helps power Deloitte's success. ITS drives Deloitte, which serves many of the world's largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence. The 2,500 professionals in ITS deliver services including Security, risk & compliance, Technology support, Infrastructure, Applications, Relationship management, Strategy, Deployment, PMO, Financials, and Communications.

Cyber Security

Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand. Cyber areas of focus include Cyber design, Risk & Compliance, Technology Risk Management, Identity & Access Management, Data Protection, Incident Response and Architecture.

Basic Qualifications

• Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity or equivalent professional experience

• Verifiable 6 years of experience in a solutions architecture, security leadership, or software development role

• Working knowledge of cyber security practices and technologies including identity and access management (IAM), multi-factor authentication, encryption, IDS/IPS, firewall, end-point protection (AV, EDR), DLP, CASB, vulnerability management, and security information and event management (SIEM)

• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Preferred Qualifications

• Superior communication (verbal and written), problem solving, collaboration, presentation, executive presence, and interpersonal skills

• Capability to design and/or evaluate secure cloud-based solutions to include experience with cloud frameworks and security infrastructures in AWS, Azure, or GCP

• Strong preference for experience working with scripting languages (Bash/Powershell), application development (JavaScript, Python, .NET, Docker), databases (RDS, SQL Server, Oracle), source control (GitHub, Bitbucket), CI/CD (Jenkins, Chef, Puppet, Ansible), test automation (Selenium, xUnit), and SAFe methodologies

• Knowledge of information security regulatory requirements such as General Data Protection Regulation (GDPR), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry/Data Security Standards

• Knowledge of common information security management frameworks, such as ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity Framework

Certifications

• At least one cloud and one security certification from the following:

• Cloud certifications:

• AWS Certified Solutions Architect - Associate

• AWS Certified Security Specialty

• Google Associate Cloud Engineer

• GCP Professional Cloud Security Engineer

• Azure Solutions Architect

• Azure Seurity Engineer Associate

• Security Certifications:

• Certified Cloud Security Professional (CCSP)

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Certified Information Systems Auditor (CISA)

  For individuals assigned and/or hired to work in Colorado, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to the State of Colorado and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and delivery model. We would not anticipate that the individual hired into this role would land at or near the top end of the range, but such a decision will be dependent on the facts and circumstances of each case. A reasonable estimate of the range is $ 115,555 to $ 192,590.

#EA_ExpHire

#EAITSExpHire

FY23CS540

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.