IT Cloud Assurance & Risk Advisory - Senior Manager at Deloitte

Job Description

• We are looking for a Senior Manager to support the business leadership in the sales (business development) and delivery of Cloud Assurance and Risk Advisory service offerings. It is key to have an IT Risk and Audit background with cloud implementation experience (risks and controls).
• This role is focused on the assurance of cloud implementation; reviewing the risks and controls (auditing view) when implementing Cloud Solutions. Build high performing teams to deliver on client engagements.

Technical Competencies:

• Proven winning business, staff development, exceptional delivery, business development, with continuous improvement.
• Bring deep technical (SME) and industry experience in selected Cloud sub offering (domain) to engage with clients and key stakeholders pragmatically.
• Understands technical complexity at Network, Application, Database, Infrastructure and Cloud level.
• Understand and interpret complex cloud-related business challenges and has a demonstrated ability to respond by conceiving innovative Cloud Risk solutions for clients.
• Strong on design and delivery of end-to-end information security Cloud solutions which are enabled by technology and can think independently and creatively when formulating cloud solutions.
• Strong in the field of current cloud technologies and their applications within a business context.
• Experience in translating clients' risk, security, and compliance requirements into specific Cloud Risk solutions and design patterns.
• Applying Cloud Security Reference Architectures to deliver consistent, standardized solutions for Identity & Access Management and Cloud related technology.
• Designing solutions for managing risk for integration between Cloud and on-premises security solutions.
• Solutions Architect experience preferable.
• Utilizing and applying knowledge of Cloud solutions across IaaS, PaaS & SaaS into projects, such as AWS, Google and Azure.
• Laws and regulations related to Information Security, Data Protection and/or Privacy especially where relevant to the Cloud.
• Good technical capability and technical certifications in the following areas: 
• Cloud Security engineering/design/operations: CCSP - Certified Cloud Security Professional [ISC2], AWS Solution Architect, SalesForce, and other SaaS solutions specific security topics
• Amazon and/or Microsoft certified Solutions Architect.
• Ability to identify patterns, and analyse and improve processes and controls
• IT System and networks design, build and administration
• Project Management including Agile Project Management
• DevOps toolsets (CI/CD pipeline) and corresponding DevSecOps capabilities
• Microservices, containerisation, server-less computing/FaaS
• Related Technical fundamentals at that point in time and what the market is procuring
• Applies deep knowledge of disruptive trends and competitor activity to drive continuous improvement in the Cloud Risk space. 

Behavioural Competencies:

• Exceptional communication skills, both written and verbal
• Able to deliver multiple engagements on time and within budget
• Proven ability to make decisions and the right judgement calls in complex projects and situations
• Creates a culture of trust, ownership and accountability across teams and projects
• On the job coaching for managers and professional staff and taking accountability for multiple large engagements
• Manages large engagement / multiple engagement deadlines holistically, identifying risks and escalating
• Drives continuous improvement
• Custodian of the business, shaping offerings that we need to proactively take to the market

Qualifications

Advanced certifications, diplomas, professional certifications, advanced degrees in Cyber or information security - examples include:

• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)
• CCSP (Certified Cloud Security Professional) for AWS + Azure + GCP
• AWS/Amazon and/or Microsoft certified Solutions Architect or suitable hands-on experience is required.

Experience:

• Minimum of 10 years in a client-facing role; with 4 of these years in management roles.
• Cloud specific experience, in a professional, consulting services, public and/or private sector organizations is required.
• Experience in translating clients' cloud risk into specific Cloud solutions and design patterns
• Applying Cloud Reference Architecture to deliver consistent, standardized solutions for Identity and Access Management, Data Protection, Secure DevOps, Security Operations, and other security domains
• Designing solutions for integration between Cloud and on-premises security solutions.