Job Description

Job Requisition ID: 41108

• Be part of market-leading projects with global scale and complexity

• Reimbursements for professional development and subsidised qualifications

• Enjoy 18 weeks paid parental leave plus 12 months of return-to-work support (work 4, get paid 5)

What will your typical day look like?

In this role, you'll work across governance, risk and compliance engagements that help clients identify security threats, assess control effectiveness, and improve how risk is managed and reported. That could mean maintaining risk registers, running internal audits against frameworks like ISO 27001, NIST CSF or the ISM, and supporting the development of policies, standards and procedures that align with regulatory obligations and business priorities.

Your work will help clients make better decisions about where to focus their attention, investment and remediation efforts. From assessing third-party risk to analysing patterns in non-compliance or emerging issues, you'll turn complex information into clear, actionable advice that strengthens control environments and supports more resilient organisations.

Along the way, you'll collaborate with technical specialists, project teams and business stakeholders to embed security-by-design into new initiatives and systems. The work is varied, fast-moving and grounded in real-world client challenges, with opportunities to support broader programs including occasional short-term international travel.

About the team

Our team helps organisations build trust into the way they operate, transform, and grow. You'll be part of a team working across cyber security, privacy, identity, digital risk, and resilience, helping clients protect critical systems and make confident decisions in increasingly complex technology environments.

Enough about us, let’s talk about you.

You may have all or some of the following skills/experiences:

• Experience applying risk management principles to identify, assess and document security threats and vulnerabilities within a risk register
• Strong working knowledge of cyber governance, risk and compliance frameworks such as ISO 27001, NIST CSF and the ISM
• Experience conducting internal audits and compliance assessments, and coordinating evidence collection for formal reporting
• Ability to develop and maintain security policies, standards and procedures that align with regulatory requirements and business goals
• Experience performing third-party risk assessments to evaluate the security posture of vendors and external partners
• Confidence analysing complex data sets to identify non-compliance trends, emerging risks and opportunities to strengthen controls
• Strong stakeholder engagement skills, with the ability to provide clear, actionable advice on remediation activities and security control improvements
• Ability to hold an Australian Government security clearance, with experience in Australian regulatory contexts, Federal Government environments, or certifications such as CISA, CRISC, CISM or CompTIA Security+ viewed favourably

Why Deloitte?

At Deloitte, we focus our energy on interesting and impactful work. We’re always learning, innovating and setting the standard; making a positive difference to our clients and our society. We putcoaching at the heart of what we do, helping our people grow their careers in any direction – whether it be up, moving into something new, or even moving across the world.

We embrace diversity, equity and inclusion. We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles. What binds us together is a shared commitment to value everyone’s perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong.

We value in-person connection with our clients and our colleagues. We offer several ways for you to work flexibly so that you can serve your clients, stay connected with your team, and manage your personal priorities.

We help you live and work well. To support your personal and professional life, we offer a range of perks and benefits, including retail discounts, wellbeing leave, paid volunteering days, twelve flexible working options, market-leading parental leave and return to work support package.

Next Steps

Sound like the sort of role for you? Apply now, we’d love to hear from you!

#LI-Hybrid

By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.