Senior Consultant, Cyber Strategy

Daily activities vary for our Cyber Strategy practitioners, depending on the client engagement. Practitioners will work on projects across multiple clients and industries in a fast-paced environment. You will work closely with client teams to understand their needs and business, and collaborate with Deloitte colleagues to solve problems, recommend solutions, and provide expertise to your clients. Senior Consultants support junior resources and the team in developing high quality deliverables, developing engagement plans and interfacing with clients on multiple levels of an organization (operational all the way to executive). Cyber Strategy services engagements in which Senior Consultants are involved vary widely: from maturity assessments to guidance and support in establishing actionable roadmaps, as well as supporting security programs or acting as a Subject Matter Expert on cyber topics.

The environment at Deloitte is made up of intellectually curious, ambitious, results-oriented and rigorous people. We have world-class security and privacy experts. Our Cyber Risk Services help organizations with the management of information and technology risks by delivering end-to-end solutions, using proven methodologies and tools in a consistent manner. Our services help organizations address timely and pervasive issues such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries, with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

You have a minimum of 4 years of relevant work experience in cybersecurity. A mix of experience between cyber and IT or risk management will be considered. Technical experience is not required but the ability to participate in technical discussions is critical;
• You have an Undergraduate (or higher) degree in Information Security Management, Business Administration, Risk Management, Computer Science or Engineering;
• You have strong knowledge of cybersecurity frameworks, standards and guidelines such as ISO 27001, NIST SP 800-30/34, NIST CSF and/or ISF CSF;
• You have working knowledge of general IT and business processes and controls; you understand and have a working experience around cybersecurity and privacy relevant regulatory and compliance requirements (such as OSFI, B10, PIPEDA, three lines of defense model, etc.);
• You have strong communication skills and are comfortable in varied business and political contexts;
• You are results-oriented, independent and have great client management capabilities;
• You have strong time management, report writing and presentation skills;
• You have strong problem solving, organizational and analytical skills, with the ability to articulate complex concepts in a clear and concise manner;
• You are able to obtain a basic security clearance;
• Optional but Desirable: You have industry-recognized cybersecurity relevant certification such as Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA);

The salary range for this position is $72,000 - $125,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. Some representative examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, 38+ days off (including 10 firm-wide closures known as "Deloitte Days"), flexible work arrangements and a hybrid work structure.