Are you ready to unleash your potential? At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve. We believe we have a responsibility to be a force for good, and <a href="https://www2.deloitte.com/id/en/pages/about-deloitte/topics/worldimpact.html">WorldImpact</a> is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices. Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals. We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions. Ready to unleash your potential with us? Join the winning team now! Work you'll do: <ul> <li style="text-align:justify;font-size:14.0pt">Client Engagements: Delivering engagements and working with clients' stakeholders to understand their business objectives and cybersecurity needs. Assist in planning, organizing, and delivering cyber security projects as assigned, including leading the project team and supporting the project management activities.</li> <li style="text-align:justify;font-size:14.0pt">Team Leadership: Lead and mentor a team of cybersecurity consultants/ analysts, fostering a culture of collaboration and continuous improvement.</li> <li style="text-align:justify;font-size:14.0pt">Professional Development: Provide guidance and support to junior team members in their professional development.</li> <li style="font-size:14.0pt">Client Relationships: Build and maintain strong relationships with clients, serving as a trusted advisor on cybersecurity matters.</li> <li style="text-align:justify;font-size:14.0pt">Cybersecurity Assessment: Assess the existing client’s cybersecurity capabilities against standards/frameworks (people, process, technology), identify gaps, and provide actionable recommendations for improvement.</li> <li style="text-align:justify;font-size:14.0pt">Regulatory/ Standard Compliance: Ensure client strategies comply with relevant cybersecurity regulations, standards (e.g., NIST, ISO), and industry best practices.</li> <li style="text-align:justify;font-size:14.0pt">Cyber Strategy Development: Develop tailored cybersecurity strategies that align with the client’s business goals, regulatory requirements, and risk profile. Working with SMEs to develop a strategic cyber security plan and roadmap to improve the client's cyber security posture over 3-5 years.</li> <li style="text-align:justify;font-size:14.0pt">Cyber Architecture Review: Assess the client’s network, enterprise, and security architecture, propose a target state model, identify gaps, and provide recommendations for improvement.</li> <li style="text-align:justify;font-size:14.0pt">Cyber Risk Management: Design and develop a cybersecurity risk management framework, policy, and procedures, including the roles, responsibilities, operation model, risk register, cyber risk formula, and risk evaluation criteria.</li> <li style="text-align:justify;font-size:14.0pt">Cyber Risk Assessments: Conduct cybersecurity risk assessments and develop mitigation plans to address potential security threats, including developing a cyber security KPI/ KRI, cyber risk threshold, and cyber risk report for the management. </li> <li style="text-align:justify;font-size:14.0pt">Cyber Operating Model: Advise clients about transforming cybersecurity organizations, including improving cybersecurity organizations, roles, responsibilities, competencies, and performance evaluation of cybersecurity personnel. </li> <li style="text-align:justify;font-size:14.0pt">Cyber Training Awareness: Delivering security training and awareness for the client’s various stakeholders.</li> <li style="text-align:justify;font-size:14.0pt">Cyber Maturity Improvement/ Remediation: Assist clients with implementing cyber security recommendations, programs, and initiatives. This includes assisting the implementation of cyber security technologies/ solutions, designing and developing control designs, frameworks, policies, procedures, and guidelines, and supporting the implementation of cyber security controls.</li> </ul> Requirements: If you are someone with: <ul> <li style="text-align:justify;font-size:14.0pt">Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.</li> <li style="text-align:justify;font-size:14.0pt">More than 4 years of experience in information technology, IT audits, or cybersecurity.</li> <li style="font-size:14.0pt">Strong leadership and team management capabilities, with experience mentoring and developing consultants.</li> <li style="text-align:justify;font-size:14.0pt">Ability to work independently and as part of a team with professionals at all levels.</li> <li style="font-size:14.0pt">Outstanding problem-solving skills, including the ability to analyze complex issues, develop hypotheses, and recommend solutions.</li> <li style="text-align:justify;font-size:14.0pt">Demonstrate clear, articulate, and confident written and verbal communication in English.</li> <li style="font-size:14.0pt">Team player with excellent interpersonal and communication skills </li> <li style="text-align:justify;font-size:14.0pt">Exposure to international standards (e.g., NIST, CIS 20, ISO27001, PCI - DSS, and data privacy) and strong knowledge of cybersecurity concepts (e.g., Identity and Access Management, Asset Security, Network Security, Security Operations, Cloud Security, and Software Development Security).</li> <li style="text-align:justify;font-size:14.0pt">Experience in the following areas will be an advantage: cybersecurity assessments, cloud security, security architecture review, cyber risk assessments, DevSecOps, cybersecurity governance, cybersecurity/ IT audit.</li> <li style="text-align:justify;font-size:14.0pt">Certification in CISSP, CISM, CISA, CRISC, CEH, ECIH, CHFI, CTIA, Security+, Network+, CySA+, CCSK, OSCP, CRTP, ISO 27001 lead auditor or implementor is highly advantageous.</li> </ul> Due to volume of applications, we regret only shortlisted candidates will be notified. Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request money or your personal information. Kindly apply for roles that you are interested via this official Deloitte website. #LI-AN #LI-AN

T&T Senior Consultant - Cyber Strategy and Transformation - ID (Jakarta, ID) @ Deloitte SEA Services Sdn Bhd

About this role

Ready to apply?