Talent.com
Cybersecurity Controls Compliance Lead Analyst, Deloitte Global Technology
Cybersecurity Controls Compliance Lead Analyst, Deloitte Global TechnologyDeloitte • Kitchener, ON
Cybersecurity Controls Compliance Lead Analyst, Deloitte Global Technology

Cybersecurity Controls Compliance Lead Analyst, Deloitte Global Technology

Deloitte • Kitchener, ON
30+ days ago
Job type
  • Permanent
Job description

Job Type :   Permanent

Work Model :   Hybrid

Reference code :   127621

Primary Location :   Toronto, ON

All Available Locations :   Edmonton, AB; Halifax, NS; Kitchener, ON; Regina, SK; Toronto, ON

Our Purpose

At Deloitte, we are driven to inspire and help our people, organization, communities, and country to thrive. Our Purpose is to build a better future by accelerating and expanding access to knowledge. Purpose defines who we are and gives us reason to exist as an organization.

By living our Purpose, we will make an impact that matters.

  • Enjoy flexible, proactive, and practical benefits that foster a culture of well-being and connectedness.
  • Experience a firm where wellness matters.
  • Be expected to share your ideas and to make them a reality.

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

What will your typical day look like?

The Cybersecurity Controls Compliance Lead Analyst will focus on assessing, testing, and reporting Global and Deloitte Firm compliance with applicable Global Cybersecurity standards at the level of individual controls, and providing subject matter expertise to Global and Deloitte firms to support and enhance compliance efforts. Additionally :

  • Actively participate in the planning and development of the technology and cybersecurity controls assurance process and lifecycle.
  • Execute the design and implementation of an integrated controls library, enabling the mapping of controls to Deloitte’s internal policies and standards, and external authoritative sources such as ISO27001, ISO22301, NIST, and other frameworks.
  • Conduct deep dive assessments to verify the effectiveness of specific Deloitte Firm and Global Shared Services controls in agreement with other team members, and provide constructive recommendations, findings and observations where required.
  • Support and execute assessment activities using the GRC platform Service Now.
  • Update the Integrated Controls Library (ICL) by liaising with other team members and relevant governance bodies as needed.
  • Monitor the effectiveness of the compliance assessment process in accordance with agreed metrics and performance measures to drive continuous improvements.
  • Develop and implement a compliance controls assurance process, assisting in the implementation of this process using the compliance tool (ServiceNow GRC).
  • Develop and implement reporting and metrics on compliance using the ServiceNow GRC tool and support the generation of specific compliance reports and dashboards.
  • Develop and maintain relationships with senior cybersecurity, technology, legal, and risk leaders within DTTL and across Deloitte firms.
  • Develop and maintain relationships with DTTL service teams to ensure collaboration and alignment, to understand strategic and tactical priorities, and deliver continuous improvement.
  • Work with other Governance, Risk, and Compliance groups and participate in technology and risk working groups as required.
  • Participate in the development and implementation of global strategies and provide programs and services that unite the Deloitte network.
  • Be proactive in seeking out areas for improvement and offer insightful advice and value-added guidance on process and control enhancements.
  • About the team

    Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

    Enough about us, let’s talk about you

    Do you possess the following? :

    Education :

    Bachelor’s degree in business administration, a technology-related field, or equivalent education-related experience.

    Experience :

  • Minimum of 5 years of combined experience in the Information Security / Cybersecurity domain with a focus on cybersecurity and compliance.
  • Experience developing compliance programs, including assessing and managing compliance against agreed standards at the level of individual security controls (administrative, technical / logical, physical) for multiple organizations or business units.
  • Experience interacting, presenting, and working with C-level executives (CEO, CIO, etc.).
  • Proven track record of organizing and carrying out several risk and compliance projects.
  • Experience with GRC (Governance, Risk, and Compliance) management tools such as ServiceNow, or similar GRC management tools.
  • Sound knowledge of information / cybersecurity risk management and governance.
  • Knowledge of common information security management frameworks, such as ISO / IEC 27001, and NIST (including 800-53 and the Cybersecurity Framework).
  • Excellent written and verbal communication skills and the capability to communicate with cross-functional teams.
  • Strong interpersonal and collaborative skills.
  • Ability to communicate strategic information security topics, policies, standards, and risk-related concepts to both technical and non-technical audiences at various hierarchical levels.
  • Preferred certifications : Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), ISO27001 Lead Auditor or other similar, credentials, Certified Information Systems Security Professional (CISSP)
  • Total Rewards

    The salary range for this position is $69,000 - $114,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

    Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. Some representative examples include : $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, 38+ days off (including 10 firm-wide closures known as "Deloitte Days"), flexible work arrangements and a hybrid work structure.

    Our promise to our people : Deloitte is where potential comes to life.

    Be yourself, and more.

    We are a group of talented people who want to learn, gain experience, and develop skills. Wherever you are in your career, we want you to advance.

    You shape how we make impact.

    Diverse perspectives and life experiences make us better. Whoever you are and wherever you’re from, we want you to feel like you belong here. We provide flexible working options to support you and how you can contribute.

    Be the leader you want to be

    Some guide teams, some change culture, some build essential expertise. We offer opportunities and experiences that support your continuing growth as a leader.

    Have as many careers as you want.

    We are uniquely able to offer you new challenges and roles – and prepare you for them. We bring together people with unique experiences and talents, and we are the place to develop a lasting network of friends, peers, and mentors.

    Create a job alert for this search

    Cybersecurity Analyst • Kitchener, ON

    Similar jobs
    Director, Technology Risk and Compliance, Digital & Client Technology Solutions

    Director, Technology Risk and Compliance, Digital & Client Technology Solutions

    Sun Life • Kitchener
    Full-time
    Director, Technology Risk and Compliance, Digital & Client Technology Solutions.Be among the first 25 applicants.You are as unique as your background, experience and point of view.Here, you’ll be e...Show more
    Last updated: 26 days ago • Promoted
    Digital Health Transformation & Data Integration Lead

    Digital Health Transformation & Data Integration Lead

    Alliance for Healthier Communities • Brantford
    Full-time
    A community-focused health organization in Brantford seeks a Digital Health and Data Integration Specialist to lead digital initiatives and manage data integrations. The ideal candidate should have ...Show more
    Last updated: 3 hours ago • Promoted • New!
    Information Technology Private Tutoring Jobs Delhi

    Information Technology Private Tutoring Jobs Delhi

    Superprof • Delhi, Canada
    Full-time +1
    Superprof is Canada's #1 tutoring platform, and we're actively recruiting passionate tutors! Whether you're a student, a professional, or simply someone who loves teaching, join the largest communi...Show more
    Last updated: 30+ days ago • Promoted
    Information Technology Security Analyst

    Information Technology Security Analyst

    Randstad Digital • Kitchener
    Full-time
    Vulnerability Management Analyst - Info Sec (Contract Position).Must be eligible to work in Canada.Hybrid position, 3 days / week onsite either in Kitchener or DT Toronto office.Looking to hire a Jun...Show more
    Last updated: 7 days ago • Promoted
    Operational Risk Consultant

    Operational Risk Consultant

    Insight Global • Guelph
    Full-time +1
    Be among the first 25 applicants.This range is provided by Insight Global.Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.Hybrid 2x / week in Guel...Show more
    Last updated: 8 days ago • Promoted
    Oracle Cloud Senior Technical Lead

    Oracle Cloud Senior Technical Lead

    ArcLight Consulting • Guelph, Ontario, Canada
    Full-time
    ArcLight Consulting, an Addison Group Company, is dedicated to ensuring that Cloud Solutions clients are successful with their investment. For over 15 years, ArcLight experts have provided guidance ...Show more
    Last updated: 1 hour ago • Promoted • New!
    Analytics Lead - Next Best Engagement

    Analytics Lead - Next Best Engagement

    Harnham • Guelph, Ontario, Canada
    Full-time
    Analytics Lead – Omnichannel Orchestration & Next Best Engagement (NBE).Remote in Canada (excluding Quebec).Up to $200,000 CAD + Bonus + Benefits. Harnham is partnering with a major global pharmaceu...Show more
    Last updated: 5 hours ago • Promoted • New!
    Global Value Stream Leader, Lean Manufacturing

    Global Value Stream Leader, Lean Manufacturing

    CEVA SANTE ANIMALE • Guelph
    Full-time
    A global animal health leader in Guelph, Canada is seeking a Focus Factory Leader to oversee value stream excellence in GMP compliance. This full-time role encompasses leading cross-functional teams...Show more
    Last updated: 7 days ago • Promoted
    Senior Operations Risk Manager

    Senior Operations Risk Manager

    Affirm • Kitchener
    Full-time
    Senior Operations Risk Manager.Be among the first 25 applicants.Senior Operations Risk Manager.Get AI-powered advice on this job and more exclusive features. Affirm is reinventing credit to make it ...Show more
    Last updated: 7 days ago • Promoted
    CIO — Digital Transformation & Risk Leadership

    CIO — Digital Transformation & Risk Leadership

    Agricorp • Guelph
    Full-time
    A government agency in Ontario is seeking a Chief Information Officer to lead their IT Services division.This role involves overseeing technology solutions, aligning IT with strategic plans, and ma...Show more
    Last updated: 27 days ago • Promoted
    System Analyst - guelph

    System Analyst - guelph

    OGGN Inc. • guelph, on, ca
    Full-time
    Please specify your security clearance level in resume, resumes without security clearance level will not be shortlisted for review for this client • • •. Location : Remote (Physically present in Canada...Show more
    Last updated: 7 hours ago • Promoted • New!
    ERP & Operations Lead — D365 SME & Training

    ERP & Operations Lead — D365 SME & Training

    Hammond Power Solutions • Guelph
    Full-time
    A leading power solutions manufacturer is seeking an Operations Systems & ERP Lead based in Guelph, Ontario.This role involves leading operational planning initiatives, optimizing ERP alignment, an...Show more
    Last updated: 7 days ago • Promoted
    Workday Payroll Lead

    Workday Payroll Lead

    Focus on WD • Guelph, Ontario, Canada
    Permanent
    We are partnering with a leading global Workday partner with a very strong pipeline of Workday Payroll projects across the United States and Canada. They are expanding their dedicated Payroll deploy...Show more
    Last updated: 1 hour ago • Promoted • New!
    Senior Trading and Risk Solutions Lead

    Senior Trading and Risk Solutions Lead

    Luxoft • Guelph, Ontario, Canada
    Full-time
    As part of our growth in Americas, we have a number of projects and initiatives starting and requiring senior leadership to be delivered and to execute our long term growth strategy in the region.R...Show more
    Last updated: 3 hours ago • Promoted • New!
    Senior Treasury Lead — Drive Donor Funds & Compliance

    Senior Treasury Lead — Drive Donor Funds & Compliance

    University of Guelph • Guelph
    Full-time
    A leading educational institution is seeking a Senior Treasury Lead to manage donations and ensure compliance with regulations. The role involves mentoring staff, analyzing financial data, and overs...Show more
    Last updated: 8 days ago • Promoted
    Market Risk Senior Developer SME

    Market Risk Senior Developer SME

    Comptech Associates • Guelph, Ontario, Canada
    Full-time
    Job Title : NYB - Market Risk Senior Developer SME (MX, Other).Location : Remote (MX, Latam, Canada (EST working hours).Technical / Functional Expert in Market Risk - Application Development serves a...Show more
    Last updated: 5 hours ago • Promoted • New!
    Lead Information Security Specialist

    Lead Information Security Specialist

    Co-operators • Guelph
    Full-time
    Department : Information Technology.Employment Type : Regular Full-Time.Language : English is required, French is an asset. Additional Information : This / these role(s) is / are currently vacant.We are a l...Show more
    Last updated: 7 days ago • Promoted
    Global Risk Manager - Renewable Energy Strategy Compliance

    Global Risk Manager - Renewable Energy Strategy Compliance

    Canadian Solar Inc. • Kitchener
    Full-time
    A leading renewable energy company is seeking a Global Risk Manager to oversee compliance with e-Storage risk processes and lead the commercial team. The role requires strong background in commercia...Show more
    Last updated: 7 days ago • Promoted