--

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

What will your typical day look like?

This role is centered around managing and enhancing technology and cyber security controls within Deloitte Technology, with a strong focus on leveraging ServiceNow Integrated Risk Management modules. This role requires a combination of technical expertise, risk management knowledge, and stakeholder engagement skills to successfully deliver on its objectives. Below is a breakdown of the key responsibilities based on your description:

The position is part of the Technology Control Management Team and involves working collaboratively to deliver processes related to technology and cyber security controls. The goal is to ensure effective management, assessment, and automation of controls while supporting IT risk management processes within Deloitte Technology.

Key Responsibilities:

• Support the development of IT organizational maturity by leveraging global and Deloitte Technology standards.
• Conduct maturity assessments and compliance activities to align with best practices
• Automation of Control Assessment Processes:
• Develop automated elements for control testing and assessment processes to improve validation and efficiency.
• Enhance the use of ServiceNow Integrated Risk Management to streamline control management processes.
• Use ServiceNow’s Integrated Risk Management modules to define, deliver, and manage controls.
• Help teams populate and manage their controls within ServiceNow to support broader risk and control processes.
• Work within IT risk management processes aligned with the 3 Lines of Defense model.
• Participate in assessments as needed within Deloitte Technology.
• Provide ongoing assistance to Member Firms and Deloitte Technology Service Lines as they implement action plans.
• Build relationships with Member Firms and support their progress on control-related initiatives.
• Prepare detailed reports for leadership, Member Firms, and stakeholders, including Global Risk Leaders, Executive, and Board-level presentations.
• Proficiency in ServiceNow Integrated Risk Management.
• Strong understanding of IT risk management frameworks and the 3 Lines of Defense model.
• Ability to automate and optimize control management processes.
• Effective communication and stakeholder management skills.
• Analytical skills for assessing and validating controls.
• Experience in preparing high-quality reports for leadership.

About the team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Enough about us, let’s talk about you

This role requires a combination of technical expertise, leadership skills, and adaptability to global and cultural diversity. Candidates who meet both essential and desirable criteria would be well-positioned to succeed. Do you possess the following?:

• Hands-on experience with tools like ServiceNow or similar platforms for managing IT and Cyber control testing and risk assessments.
• Proven ability to develop controls within ServiceNow or similar risk and control management tools.
• Familiarity with industry standards such as CMMI, COBIT, ITIL, PMI, Prince2, ISO27001, and Cybersecurity principles.
• Background in global cybersecurity practices.
• Strong understanding of SDLC approaches and concepts (CMMI knowledge is a plus).
• Solid grasp of ITIL framework or MOF (ITIL certification is advantageous).
• Diplomatic and persuasive communication skills to confidently manage senior stakeholders like CIOs and CEOs.
• Knowledge of workflows, scripting, and IRM indicators within ServiceNow deployments.
• Familiarity with ServiceNow Integrated Risk Management (IRM) module.
• Ability to lead virtual teams across time zones and cultures.
• Strong relationship-building skills within GTS and member firm networks.
• Capability to work with and manipulate complex datasets.
• Excellent communication skills.
• Additional language skills are a plus.
• Experience with application development.

Total Rewards

The salary range for this position is $85,000 - $156,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth.  Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as "Deloitte Days", dedicated days of for learning (known as Development and Innovation Days), flexible work arrangements and a hybrid work structure.