Strategic
- Align with the firm’s technology risk management strategy to actively contribute to the development of best practices, based on research and industry best practices in regulatory and risk governance matters.
Operational
- Support the first line of defense technology risk policy review processes.
- Fulfill activities to determine the effectiveness of technology controls mitigating key technology risks, support the identification of control enhancements in end-to-end processes, provide challenges on remedial actions, and share insights and best practices with relevant business units as a proactive measure to reduce the likelihood and impact of future risk events.
- Support initiatives to educate technology functions on technology risk management requirements according to regulatory requirements, firm policy, data classification, client commitments, etc.
- Demonstrate and apply a working understanding of technology trends to identify issues and communicate this information to the management team through written correspondence and verbal presentations.
Relationship Management
- Build strong relationships with key internal stakeholders and relevant first line of defense Technology Risk Management, technology teams, and member firms, as needed.
- 3 plus years of experience
- Basic knowledge of significant security and privacy laws and regulations in the Americas, Europe, Middle East, Asia, Africa, and Oceania is preferable (e.g., GDPR).
- Working knowledge in two or more of the following IT and risk domains: cloud hosting, infrastructure, cyber security, secure SDLC, service management, data protection, privacy, IT risk management, maturity assessments, third-party risk management.
- (Cloud, RPA, Artificial Intelligence) and ways of working (Agile/SAFe) in the context of applicable regulatory requirements and IT delivery model.
- Experience in developing and applying standards, principles, methods, and supporting IT risk governance practices in a medium-scale to large-scale Information Security, Technology environments.
- Analytical and problem-solving mindset; demonstrated ability to synthesize large amounts of data in short periods of time for consumption by multiple stakeholders.
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
Global Risk & Brand Protection protects, preserves and enhances the Deloitte brand. We navigate the dynamic risk landscape across the areas of risk management, confidentiality & privacy, cyber security oversight, regulatory, independence & conflicts, and Anti-Corruption/financial crimes. We foster trusting relationships across the Deloitte network through collaboration, facilitation and responsive guidance.
