Cybersecurity Project Assurance Manager

Cybersecurity Project Assurance Manager

Posted 1 day ago by Deloitte

Apply
Negotiable
Inside
Hybrid
London Area, United Kingdom
Apply
Artificial Intelligence Budgeting Business Process Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Control Objectives For Information And Related Technology (COBIT) Cyber Security Data Loss Prevention External Auditing Hardening Information Security Management Information Systems Information Systems Security Insider Threat Management Mobile Devices Open Web Application Security Project (OWASP) Penetration Testing Project Assurance Project Management Project Stakeholders Risk Management Security Awareness Security Testing Stakeholder Management Systems Controls Vulnerability Vulnerability Management Vulnerability Scanning

Summary: The Cybersecurity Project Assurance Manager role at Deloitte involves overseeing cybersecurity practices within technology projects, ensuring compliance with industry standards and regulations. The position requires interfacing with various teams to identify risks and implement mitigation strategies while maintaining documentation and reporting. The role is hybrid, requiring travel to the London office two days a week, and is part of a 12-month contract starting in August 2025. Candidates should possess strong cybersecurity knowledge and experience in risk management and project management.

Key Responsibilities:

  • Assess that Cybersecurity is embedded throughout the development lifecycle of Technology Assets.
  • Use Deloitte’s Secure System Development Lifecycle (SSDLC) to assure paths to production.
  • Oversee security testing activities like vulnerability scanning, penetration testing, and code reviews.
  • Identify weaknesses and potential exploits on the identified security requirements.
  • Identify potential information security risks within a project, analyze their impact, and develop mitigation strategies.
  • Ensure the project adheres to Deloitte’s Cybersecurity capability framework and relevant information security regulations.
  • Communicate security awareness, concerns, and requirements to project stakeholders.
  • Maintain documentation related to security assessments, risks, mitigation plans, and compliance status.
  • Work with Business Relationship Managers, Business Advisers, and Programme Managers to provide advice on Project Demand initiatives.
  • Collaborate with local and Global compliance teams to ensure secure development practices align with good practice.

Key Skills:

  • Cybersecurity experience with a strong understanding of information security principles.
  • Knowledge of Cybersecurity risk and controls, including OWASP Top 10 and vulnerability management.
  • Strong knowledge in cybersecurity frameworks and standards like ISO 27001, NIST, COBIT, and Cyber Essentials+.
  • Experience with risk management methodologies and techniques.
  • Understanding of project management to manage security aspects within a project timeline and budget.
  • Knowledge of cybersecurity technologies such as mobile threat defense and endpoint protection.
  • Excellent communication and stakeholder management abilities.
  • Experience in a fast-paced, deadline-driven environment.
  • Relevant certifications like CISSP, CISM, or CRISC are desirable.
  • Experience in assessing Technology Assets for adherence to security requirements.

Salary (Rate): undetermined

City: London

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Job Title: Cybersecurity Project Assurance Manager (contract) Location: London Hybrid. Travel to the London office 2 days a week Duration: 12 months Contract Start Date: August 2025 Deloitte Working with the Deloitte Associate (Contractor) Programme means we can offer you the opportunity to work on a variation of industry and client related projects. Our aim is to retain the best talent and so when your project end date nears our team of Talent Community Advisors will be working with you to look at alternative projects within the firm that suit your experience should you wish to continue with Deloitte.

The Role We are looking for an experienced Cybersecurity Project Assurance Manager to work in the innovative and creative CISO team at Deloitte. A world class operation with extensive knowledge and experience. Interfacing with business and technical teams and bringing about change and influence across the whole world of Deloitte. You will be part of a great team that are passionate about our work in serving a great purpose.

Your professional experience Cybersecurity experience with a strong understanding of information security principles, including confidentiality, integrity, and availability. Demonstrable understanding of Cybersecurity risk and controls inherent in various technologies, and related best practices. This includes OWASP Top 10 and vulnerability management. Have strong knowledge in cybersecurity frameworks and standards like ISO 27001, NIST, COBIT, and Cyber Essentials+. Experience with risk management methodologies, techniques and clearly understand and articulate risk. Identify risks associated with business processes, operations and the roll out of technology projects. An understanding of project management to manage security aspects within a project timeline and budget. Knowledge and understanding of cybersecurity technologies - mobile threat defense, endpoint protection, data loss prevention, insider threat protection, device hardening, classification, key and certificate management. Excellent communication and stakeholder management abilities. Provide consulting and advisory to the business Experience of working in a fast-paced, deadline driven environment. Work with changing priorities and multiple projects. Have a variety of competencies including teamwork/collaboration, analytical thinking, communication and influencing skills, and technical expertise.

Desirable Relevant certifications like Certified Information Systems Security Professional ( CISSP ), Certified Information Security Manager ( CISM ) or Certified in Risk and Information Systems Control ( CRISC ) or similar. Experience in assessing Technology Assets for adherence to security requirements. An understanding of service management and delivery Deliverables: Responsibilities but not limited to: Assess that Cybersecurity is embedded throughout the development lifecycle of Technology Assets. Use Deloitte’s Secure System Development Lifecyle ( SSDLC ) to assure paths to production. Oversee security testing activities like vulnerability scanning, penetration testing and code reviews. Identify weaknesses and potential exploits on the identified security requirements. Identify potential information security risks within a project, analyse their impact and develop mitigation strategies to address vulnerabilities. These risk assessments will be presented to risk owners who are either Director or Partner level. Ensure the project adheres to Deloitte’s Cybersecurity capability framework , relevant information security regulations and industry standards. E.g. GDPR, EU AI Act, ISO 27001, NIST Cybersecurity Framework, and Cyber Essentials +. Communicate security awareness, concerns, and requirements to project stakeholders, including developers, project managers, and business leaders, to ensure alignment and buy-in. Maintain documentation related to security assessments, risks, mitigation plans, and compliance status, providing regular reports to relevant stakeholders across waterfall and iterative deployment methodologies. Enable the business by being a trusted partner . Work with Business Relationship Managers, Business Advisers and Programme Managers to provide advice and guidance on Project Demand initiatives so that speed to market is both prioritised and secured. Work with local and Global compliance teams to ensure that secure development practices across the business align to good practice, are audit ready and practical.

IR35 As a means of managing tax, commercial and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (‘PSCs’). All Associates must contract under PAYE arrangements through a Deloitte approved ‘Employment Company’ (aka ‘umbrella company.’)

Apply
Similar Jobs
Loading data...