Global Cybersecurity Policies and Standards Analyst, Deloitte Global Technology

The role involves leading the research and development of Deloitte Global cybersecurity standards, collaborating with subject matter experts, and supporting cybersecurity policy and standards initiatives. It is suited for professionals with experience in cybersecurity governance, standards, and risk management.

Location: Remote (Canada)

Salary: $69,000–$114,000/yr

Responsibilities

• Lead the research and development of Deloitte Global cybersecurity standards, detailed security baselines and their supporting documents, to meet Deloitte’s business objectives and cybersecurity risk appetite
• Collaborate with subject matter experts and leadership to determine the impact of cybersecurity standards and help resolve deployment challenges and risks
• Interact with relevant stakeholders to apply consistent application of cybersecurity policies and standards, and to ensure that changes to existing documents, new standards, and supporting documents are communicated
• Author documents and contribute to presentations, talking points, and Statements of Applicability on standards
• Support any Policies & Standards awareness initiatives and advise internal clients on applicability and interpretation of the standards’ requirements
• Develop and maintain compliance mapping of Deloitte standards’ requirements to ISO 27002
• Collaborate with team members and other Deloitte cybersecurity teams to ensure alignment
• Foster continuing maturity of the Policies & Standards team, using newer technologies such as Artificial Intelligence and Machine Learning.

Requirements

• Bachelor’s degree in cybersecurity, information systems, computer science, or other technology-related field, or equivalent experience
• 3+ years of proven combined experience, in a global/Fortune 500 company, in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management
• Experience with at least one of the technical domains (networking, operating systems, cloud, Artificial Intelligence, software development etc.)
• Strong ability to clearly communicate complex cybersecurity statements to technical and non-technical audiences at various hierarchical levels
• Deep knowledge of common information security management frameworks and standards, such as ISO/IEC 27001/27002, NIST 800-53, and the NIST Cybersecurity Framework
• Soft skills: collaboration, teamwork, persuasion, attention to detail, time management, prioritization, resourcefulness
• Advanced proficiency with MS Office products, primarily MS Word, Excel, PowerPoint
• Excellent written and verbal communication skills

Benefits

• The salary range for this position is $69,000 - $114,000, and individuals may be eligible to participate in our bonus program.
• Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels.
• Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth.
• Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. Examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as 'Deloitte Days', dedicated days for learning (Development and Innovation Days), flexible work arrangements and a hybrid work structure.

Additional Information

• Deloitte offers flexible working options, encourages diversity and inclusion, and provides accommodations for applicants with disabilities or from Indigenous communities. The role is based in Canada with offices across the country. The company emphasizes its commitment to reconciliation, environmental sustainability, and fostering a respectful, inclusive workplace.