Deloitte & Touche LLP seeks an Advisory Senior Consultant in Chicago, IL.
Work You’ll Do
Identify and evaluate complex business and technology risks, internal controls that mitigate risks, and related opportunities for internal control improvement. Assist in the selection and tailoring of approaches, methods, and tools to support service offerings or industry projects. Use technology-based tools or methodologies to review, design, and/or implement products and services. Construct and assess high-level and detailed security programs translating business needs and regulatory requirements into cost effective and risk appropriate controls. Identify opportunities to improve engagement profitability. Understand clients’ business environment and basic risk management approaches. Develop information security strategies and plans based upon generally accepted security standards. Utilize knowledge of business processes, internal control risk management, IT controls, business and information technology management processes, and market trends on client engagements. Generate innovative ideas and participate in decision making with engagement management. Build and nurture strong client relationships.
#LI-DNI
Requirements
- Bachelor's (or higher) degree in Computer Science, Information Systems, Mathematics, Engineering, Business Administration, Risk Management, or related field (willing to accept foreign education equivalent).
- Eighteen months of cyber risk and regulatory compliance experience.
- Experience must include eighteen months of:
- Creating cloud migration strategies and procedures to move systems to cloud environments, including migrating and configuring applications and servers from on-premises to AWS cloud and MS Azure cloud;
- Applying audit standards including PCAOB, COBIT, NIST SP 800-30, FFIEC, and COSO;
- Working with IAM and developing and implementing IT Governance & Risk Management Programs based on regulatory and compliance requirements, including HIPAA, SOX, CMS, ITIL, MARS-E 2.0, IRS 1075, ISO 27001 & 27002 and PCI DSS;
- Analyzing segregation of duties (SoD) conflicts in SAP security roles by utilizing SAP GRC reports to eliminate or mitigate risk due to violation of SoD rules;
- Performing project management, including client resources and teams, financials, risk evaluations, and liaising with client executives;
- Gathering business requirements and translating them into systems requirements;
- Designing High Level Design Document highlighting all the use cases, user stories, high level architecture, and required process logic;
- Managing Oracle, Okta, SailPoint, and ForgeRock Identity and Access Management solution deployments through complete system development lifecycle, including analysis of solution requirements, solution design, architecture and supporting business processes, configuring and customizing IAM software products, and testing (unit, system integration, performance, and UAT testing);
- Integrating applications with ForgeRock Access Manager and Siteminder SingleSignOn (SSO) on Sun Solaris, Windows, and Linux environments using Siteminder policy servers, Webagent, affiliate agent, and APIs; and
- Designing Low Level Design Document containing detailed functional logic of each module, pseudo code, database tables, and dependency issues.
- Position requires approximately 50% domestic travel.