Job Description

Job Requisition ID: 42109

• Hybrid and flexible work environment
• New facility with great views, cafes
• Variety of benefits, including discounts for private health insurance, super and salary packaging, option to buy/sell leave and much more

What will your typical day look like?

This is a well-established operating environment that offers variety in tasks and projects across the spheres of security. This role will require you to:

• A second line role reviewing how well the organisation is adhering to the risk management framework, policies and procedures relating to Technology risk.
• Provide oversight, review, challenge and guidance working collaboratively with the business to help them make informed risk-based decisions and help manage risks whilst providing insights and guidance.
• Oversee the identification and management of key risks and ensure compliance requirements are met across technology teams.
• Formulate technology risk management strategies, policy, processes and work plans.
• Participate in ITS/ Business projects from technology risk perspective and provide advisory and recommendation.
• Review security architecture and relevant policies for the organization infrastructure, applications and cyber resilience.
• Perform 2nd line assurance reviews.
• Prepare management reports on technology risk assessment or review results.
• You'll provide oversight, review, challenge and guidance working collaboratively with the business to help them reach their destination and help manage risks whilst providing insights and guidance. You'll oversee the identification and management of key risks and ensure compliance requirements are met across technology teams.
• You'll be required to form an opinion on how the risks are being managed assertively providing your opinion to the stakeholders which will require you to constructively challenge in a respectful manner.

You will also be expected to:

• learn about, and become an expert in, Governance, Risk & Compliance (GRC), including the requirements of industry standards - ISO27001 and SOC2
• conduct risk assessments on facilities and ICT networks in accordance with Internal Deloitte security standards and Industry best practices
• learn about, and become an expert in, security threats and open-source information,
• educate yourself, your team and the wider Deloitte community on security trends across industry; and
• manage and maintain relationships with key stakeholders (both internal and external).

We are looking for a committed and efficient professional, who thrives when supporting internal clients, and enjoys process-oriented work where they can apply their discretion and excellent organisational skills to progress multiple priorities and engage multiple stakeholders.

About the team

Deloitte’s Business Security Office (BSO) is responsible for a broad range of information security, privacy, resilience, and safety programs aimed at securing the client data in our custody, enabling our business, and protecting our people.

Sitting within the BSO, our Technology Risk Team focuses on maintaining and enhancing our Technology risk posture in line with our commitments to our most security-conscious clients. Physical, Personnel, Governance and Cyber Security comprise the key pillars of focus for this team. The team is also responsible for managing Enterprise security programs - ISO27001 and SOC2

Enough about us, let's talk about you

You may have all or some of the following skills/experiences:

• ISO27001 and SOC2
• governance, risk and compliance (GRC)
• cyber security frameworks
• security & open-source research
• Bachelor’s degree holder with major in Information Technology or related disciplines
• 4-5 years’ experience in a Technology Risk Management or IT Risk management role
• Industry Security certification (CISA, CISSP) is preferred
• Be able to work independently and under pressure
• Be a good team player
• Strong knowledge of the technology risks
• Exceptional stakeholder management skills and ability to influence
• Highly refined written and verbal communication skills
• Aptitude to work in a fast-paced environment
• good written, oral and presentation skills
• attention to detail

Why Deloitte?

At Deloitte, we create positively differentiated work experiences that enable our people to feel valued and achieve their full potential. Deloitte Australia opens the door to a career that can cross borders virtually and physically across Asia Pacific to gain experience and access projects beyond Australia’s borders. We value difference, and embrace people with diverse backgrounds, experiences, gender identities, abilities and thinking styles. Knowing that people work best in a variety of ways, we are happy to discuss alternative arrangements if the working pattern you are looking for is not specifically indicated.

We’re committed to continually building a safe and respectful workplace, where all our people feel appreciated and accepted. Through the creation of endorsed employee-led diversity networks which promote cultural, disability, LGBTI+, Aboriginal and Torres Strait Islander people and gender equality, we’re leading the way to shape an environment where everybody can thrive.

We are proud to have been recognised for our efforts in inspiring change and accelerating progress - check out our careers site for recent recognition in this space.

Next Steps

Sound like the sort of role for you? Apply now.

#Linkedin #LI-Hybrid

By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.