What will your typical day look like?

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

The ISO Program Manager will lead Deloitte’s global ISO 27001 program, including – refining the strategic vision for the program, organize and lead a ‘Center of Excellence’ of ISO 27001 leaders across Deloitte firms, identifying opportunities for continuous improvement and sharing best practices, and guiding the transition to new versions of ISO 27001 standards.

• Liaise and manage global relationships with our 3rd party auditor to improve ISMS audit efficiencies (i.e., 22301, 27001, 27017 alignment), reduce audit fatigue, and stay current on security trends and best practices.
• Drive the development of reporting, dashboards, and analysis of program status, effectiveness, and progress as needed.
• Contribute to the development and configuration of enabling tools to support cybersecurity governance, risk, and compliance management functions (e.g., ServiceNow).
• Detailed and frequent reporting to senior leadership of Deloitte Firm non-conformities, action plans, and remediation progress of the ISMS program.
• Contribute to an environment that fosters innovation and enables continuous improvement of the risk and compliance mindset across Deloitte, potentially including developing content for a training and awareness program.
• Interact in both oral and written communications in matters related to information technology risk with all levels of Deloitte Technology, including senior leadership, global risk, office of general counsel (OGC), auditors, customers, development operations teams, and technology vendors and contractors.
• Develop ISO toolkits and job aids to support and improve Deloitte firm performance and increase productivity.
• Lead (and contribute to) special or ad-hoc projects and initiatives within Deloitte Technology Governance, Risk, and Compliance as needed to support GRC strategy's implementation and achieve critical objectives

About the team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Enough about us, let’s talk about you

Do you possess the following?:

Bachelor’s degree in business, management, accounting, information systems, computer science, engineering, or related field; equivalent practical experience; and applicable certification (i.e., ISO 27001 Lead Auditor / Implementer, CRISC, CISA, CISSP).

• 5+ years of industry experience, emphasizing governance, risk management, and compliance programs.
• Experience implementing and leading ISO 27001 in a large-scale enterprise; ISO 27001 lead auditor or lead implementor certification (preferred).
• Experience with / working knowledge of risk frameworks, standards, and industry best practices (e.g., COBIT, COSO, ISO 27001, and SOC 2).
• Ability to work cross-functionally within a complex and highly matrixed organization and clearly communicate to, influence, and persuade senior leadership-level stakeholders.
• Demonstrate strong ethics by acting as a role model for values, integrity, and professional conduct and advocate for diversity, equity, and inclusion.
• Adapt to shifting priorities, demands, and timelines through analytical and problem-solving capabilities.
• Proven people, program, and project management skills leading to successful execution of established goals and objectives.

Total Rewards

The salary range for this position is $85,000 - $156,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth.  Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. Some representative examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, 38+ days off (including 10 firm-wide closures known as "Deloitte Days"), flexible work arrangements and a hybrid work structure.