Deloitte Technology Governance Risk and Compliance Programs Manager, Global Aberdeen, Scotland
Job description
Connect to your Industry
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Connect to your career at Deloitte
Deloitte drives progress. Using our vast range of expertise, that covers audit, risk advisory, and consulting services across tax, legal, business, technology and corporate finance, we help our clients become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.
What brings us all together at Deloitte? It’s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.
Connect to your opportunity
As the Governance Risk and Compliance - Programs Manager within the Deloitte Technology (DT)organization you will be responsible for leading, managing and supporting critical, high-visibility programs and initiatives that are key components of Deloitte Technology’s governance, risk and compliance strategy.
The role will be responsible for leading and managing programs that develop, maintain and mature common technology and cybersecurity standards across Deloitte; define minimum reviews and technical validations for the implementation of new software solutions; and set common expectations for the management of information security governance risk.
This role will involve require the ability to work cross-functionally within a complex and highly matrixed organization as well as the ability to clearly communicate to, influence and persuade stakeholders at the senior leadership level.
The Governance Risk and Compliance - Programs Manager reports to the Governance Risk and Compliance Program Management Lead.
Responsibilities
- Leading Deloitte’s global ISO 27001 program, including – refining the strategic vision for the program, organizing and leading a community of practice of ISO 27001 leads across member firms, identifying opportunities for continuous improvement and common best practices, guiding the transition to new versions of the standard and managing our global relationship with BSI.
- Driving the development, evolution and refinement of the Deloitte Technology Operating Model (TOM) – which sets a baseline for the required technical validation and enterprise risk reviews for software solutions built or procured within Deloitte. This work will include articulation of requirements, scope / applicability, refinements to the model and the creation of supporting guidance for business users and technology teams. Will also lead support for implementation of the model by member firms and monitoring / reporting of compliance.
- Supporting Deloitte’s technology and cybersecurity member firm standards program, including refining the strategic direction of the program, supporting the annual definition of controls to be assessed and articulating opportunities for improved coordination and alignment with other components of the Deloitte technology compliance program.
- Leading (and/or contributing to) special or ad-hoc projects and initiatives within DT Governance Risk and Compliance as needed to support the implementation of the GRC strategy and to achieve key objectives.
- Driving development of reporting, dashboards and analysis on program status, effectiveness and progress as needed.
- Contributing to the development / configuration of enabling tools to support IT governance, risk and compliance management functions (e.g. ServiceNow).
- Contributing to an environment that fosters innovation and enables continuous improvement of the risk and compliance mindset across Deloitte Technology, potentially including developing content for a training and awareness program.
- Interacting in both oral and written communications in matters related to information technology risk with all levels of Deloitte Technology including senior leadership, global risk, office of general counsel (OGC), auditors, customers, engineering / solution development teams, and technology vendors and contractors.
Connect to your skills and professional experience
- Proven experience, with an emphasis in risk management and compliance programs.
- Experience implementing ISO 27001 in a large-scale enterprise and/or ISO 27001 lead auditor / lead implementer certification (preferred).
- Experience with / working knowledge of risk frameworks, standards and industry best practices (e.g. COBIT, COSO, ISO 27001, SOC 2, ITIL).
- Experience developing cloud, infrastructure and cybersecurity policies, standards and in translating regulatory requirements into technical controls.
- Familiarity with governance, risk and compliance (GRC) tools/platforms.
- Ability to work cross-functionally within a complex and highly matrixed organization as well as the ability to clearly communicate to, influence and persuade stakeholders at the senior leadership level.
- Ability to distill pertinent information from disparate information sources and recommend/deliver effective, balanced recommendations and outcomes.
- Ability to quickly adapt to shifting priorities, demands and timelines through both analytical and problem-solving capabilities.
- Proven people, program and project management skills leading to successful execution of established goals and objectives.
- Flexibility and good time management to cover a global organization is required and expected. Availability for occasional travel to support business needs.
- Demonstrates strong ethics by acting as a role model for values, integrity, professional conduct and as an advocate for diversity, equity and inclusion.
- Bachelor’s degree in business, management, accounting, information systems, computer science, engineering or related field / equivalent; or equivalent practical experience; or applicable certification (CRISC, CISA, CISSP).
Connect to your service line - Enabling Functions
Collaboration is central to everything we do at Deloitte. Bringing your individual skills and experience, and sharing your specialist knowledge, is how you’ll make a far-reaching impact. Come join us.
Personal independence
Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
Connect with your colleagues
“Since joining Deloitte I have really flourished as an individual and improved both my personal and professional skills. My team encourages me to be the best version of myself I can be, and to continue to develop my skills.”
Connect to your agile working options
Location: UK Wide
Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when and how you work. You’ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritise your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working
You’ll be joining one of our innovative virtual communities. Which means you’ll be part of the Deloitte Global team. You’ll spend most of your time working from home like all of your Global colleagues in the Enabling Functions, or in a local collaboration space when needed. Our hybrid-working model enables our people to collaborate, connect and innovate in both a virtual and physical capacity.
You’ll have all the support you need to succeed, including robust tech and home workstation set-up guidance, as well as access to a variety of flexible working spaces and all sorts of social activities for you to join. We’re continually innovating our working practices too, so you can expect to see new and exciting technology developments coming soon. The future of work is evolving fast and we’re already leading the way by enabling flexibility for our people and making it easy for us all to connect and collaborate.
Discover more about our locations.
Our commitment to you
Making an impact is more than just what we do: it’s why we’re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
We want you. The true you. Your own strengths, perspective and personality. So we’re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we’ll take your wellbeing seriously, too. Because it’s only when you’re comfortable and at your best that you can make the kind of impact you, and we, live for.
Your expertise is our capability, so we’ll make sure it never stops growing. Whether it’s from the complex work you do, or the people you collaborate with, you’ll learn every day. Through world-class development, you’ll gain invaluable technical and personal skills. Whatever your level, you’ll learn how to lead.
Connect to your next step
A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you’ll experience a purpose you can believe in and an impact you can see. You’ll be free to bring your true self to work every day. And you’ll never stop growing, whatever your level.
Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk/careers
WPFULL SLICSS BAITEC BAALLI CFTECH
