Deloitte & Touche LLP seeks an Advisory Senior Consultant in Costa Mesa, CA.
Work You’ll Do
Identify and evaluate complex business and technology risks, internal controls that mitigate risks, and related opportunities for internal control improvement; assist in the selection and tailoring of approaches, methods, and tools to support service offerings or industry projects; use technology-based tools or methodologies to review, design, and/or implement products and services; construct and assess high-level and detailed security programs translating business needs and regulatory requirements into cost effective and risk appropriate controls; identify opportunities to improve engagement profitability and project management activities; understand clients’ business environment and basic risk management approaches; develop information security strategies and plans based upon generally accepted security standards; utilize knowledge of business processes, internal control risk management, IT controls, business and information technology management processes, and market trends on client engagements; generate innovative ideas and participate in decision making with engagement management; and build and nurture strong client relationships.
#LI-DNI
Requirements
- Bachelor’s (or higher) degree in Computer Science, Management Information Systems, Business Administration, Engineering, Mathematics, or related field (willing to accept foreign education equivalent).
- Eighteen months of experience in performing cyber risk and controls assessments and providing regulatory compliance services.
- Experience must include eighteen months of:
- Conducting sessions to understand company’s current IAM environment and associated challenges, and capturing requirements to implement desired IAM solution;
- Designing High Level Design Document highlighting all use cases, high level architecture and required process logic;
- Designing Low Level Design Document containing detailed functional logic of each module, pseudo code, database tables, and dependency issues;
- Designing risk and controls strategies for identity and access management processes including user access, provisioning and de-provisioning to target systems, user reconciliation and password synchronization on target systems;
- Analyzing clients regulatory and compliance requirements to build effective controls to address such requirements;
- Performing project management activities, including client resources and teams, financials, risk evaluations, and liaising with client stakeholders;
- Working with major operating systems including Windows and Linux, and tools including MS Excel, MS Word, MS Project and MS Visio;
- Performing cyber risk assessments applying ISO and NIST Cyber Security Framework standards, and monitoring security-related regulatory environment for financial services and insurance industry clients; and
- Designing and implementing Identity & Access Governance and privileged account management solutions, including role-based access control and access requests, utilizing CyberArk and SailPoint.
- Position requires approximately 50% domestic travel.
Salary: $105,833.00 - $176,388.00/year;