Deloitte Information Security Officer in Phoenix, Arizona
Are you an experienced, passionate pioneer in technology – a solutions builder, a roll-up-your-sleeves technologist who wants a daily collaborative environment, think-tank feel and share new ideas with your colleagues - without the extensive demands of travel? If so, consider an opportunity with our US Delivery Center – we are breaking the mold of a typical Delivery Center.
Work you’ll do
As an Information Security Officer in Deloitte's US Delivery Center you will:
Identify and correcting flaws in the company’s security systems, solutions, and programs while recommending specific measures that can improve the agency’s overall security posture
Ensure digital assets are protected from unauthorized access. This includes securing both online and on-premise infrastructures, weeding through metrics and data to filter out suspicious activity, and finding and mitigating risks before breaches occur
Lead and respond to IT breaches, leading efforts to counter and correct breaches
Generate reports for IT administrators and business managers to evaluate the efficacy of the security policies in place
Implement changes to secure IT infrastructure on premise and in the cloud
Prepare, maintain and update security documentation, policies, processes and controls including Information Security Governance
Monitor security access, conducting security assessments, vulnerability management and risk analysis
Perform and respond to both internal and external security audits
Brief technical vulnerabilities, system non-compliance with Information Security policies, and security incidents to project teams and executive level management
Transparency, innovation, collaboration, sustainability: these are the hallmark issues shaping government initiatives today. Deloitte’s Government and Public Service practice is passionate about making an impact with lasting change. Carrying out missions in the Government and Public Service (GPS) practice requires fresh thinking and a creative approach. We collaborate with teams from across our organization in order to bring the full breadth of Deloitte, its commercial and GPS sector expertise, to best support our clients. Our aspiration is to be the premier integrated solutions provider in helping to transform the Federal marketplace.
Our GPS Cyber & Strategic Risk team is client focused and mission driven. Our team works across industries and sectors to respond more rapidly and effectively, providing recommendations to improve information technology risk detection. We work to uncover and resolve areas where potential threats could cause the most damage to our client’s critical business operations.
2 years of relevant consulting or industry experience
Familiarly with NIST 800-53 and NIST 800-30 Frameworks
Experience working with the RMF process
Ability to drive action to achieve results with minimal direction
Strong analytical, organizational, and time management skills
Ability to coordinate and be flexible with a cross-functional team
Keen attention to detail, grammar, and formatting
High drive for continuous learning and research
Strong communication (written and verbal) and issue resolution skills
Expertise in cyber security, firewalls, network security, virtualization, cloud services, information assurance, Linux, UNIX, security information and event management (SIEM), application security, security engineering, and security architecture
Microsoft Project, Excel, Word, and Power Point experience
Ability to obtain & maintain the required security clearance if needed
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
Previous Federal Consulting experience
Previously served in an ISO role
One or more of the following certifications: CISSP, CEH, Security , GIAC
Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte.
Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Deloitte’s impact on the world. at http://www2.deloitte.com/us/en/pages/about-deloitte/articles/deloitte-corporate-citizenship.html
We want job seekers exploring opportunities at Deloitte to feel prepared and confident. To help you with your interview, we suggest that you do your research: know some background about the organization and the business area you’re applying to. Check out recruiting tips from Deloitte professionals. at http://www2.deloitte.com/us/en/pages/careers/topics/recruiting-tips.html
Category: Cyber Risk
As used in this document, Deloitte means Deloitte LLP and its subsidiaries. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.