Analyst, Business Information Security (BIS), Deloitte Global Technology

Work Model

• The stated work model is remote.
• The description also references flexible work arrangements and a hybrid work structure in general total-rewards language.

Role Overview

Core Responsibilities

• Understand the assigned global line of business and advocate for its priorities within cybersecurity.
• Work with multiple parties to improve cybersecurity health and hygiene.
• Oversee application security controls and process risk-based matters or exceptions.
• Support the Secure Systems Development Lifecycle, including functional and non-functional cybersecurity requirements.
• Provide application-specific security expertise to assigned customers.

Security and Risk Work

• Brief teams on cybersecurity priorities and discuss risks involving penetration testing, code scanning, patching, configurations, and end-of-life software.
• Address TLS configurations, service-account compliance, firewall rule-base compliance, key and certificate management, and security-agent health.
• Maintain awareness of evolving application security threats and inform relevant stakeholders.
• Evaluate vulnerability likelihood and impact and drive mitigation approaches.

Automation and Leadership

• Improve processes and help development and operations teams automate repeatable cyber vulnerability management activities.
• Lead, coach, and mentor project teams to incorporate security into enterprise and client-facing applications.

Required Qualifications

• At least three years of related cybersecurity, risk management, or client-service experience in a comparable environment.
• Ability to work across multiple teams and business units in a large organization to effect change.
• Exceptional verbal and written communication skills with diplomacy and tact.
• Experience with cloud security principles and functions.
• Capabilities across IAM, public-key encryption, SIEM, incident response, and threat and vulnerability management.

Preferred Qualifications

• Familiarity with SOC 2 principles or application security supporting SOC 2 requirements.
• Experience spanning software development, security architecture, application security risks, and vulnerabilities.
• Experience with cybersecurity policies and procedures, ideally in governance, risk, and compliance.
• Experience with Agile, SCRUM, Microsoft SDL, and STRIDE.

Compensation

• The stated salary range is $69,000 to $114,000, with possible participation in a bonus program.
• The description does not state a compensation cadence for the salary range.

About the Team