Responsibilities
Standardize, scale and implement proactive enhanced cyber security controls on Client Service Professionals laptops working across large client service teams in the US Member Firm.
Run Enhanced Control onboarding from start to finish, including questionnaire intake, policy creation, policy testing, policy tuning, policy rollout and on-going maintenance and support.
Tailor and adjust the control set to each Client’s requirements, including deciding which controls apply and how they are configured.
Deploy and maintain controls across Endpoint DLP, SMTP DLP, CASB, Web URL Filtering, Admin Rights Management, and software discovery and removal technologies.
Create and maintain Active Directory groups that support control deployment.
Build and maintain client-specific keyword lists and detection rules for controls that monitor or block sensitive data transfers.
Create and maintain tenant alignment for cross-border Client Service Professional populations
Lead software remediation, including removal of risky or unauthorized software from laptops.
Monitor block alerts and user impact and perform agile policy tuning to resolve false positives.
Work with Global Cyber Service teams to roll out enhanced controls across jurisdictions.
Coordinate with Global cyber service partners for policy configuration, testing and tuning.
Provide hypercare support using teams channel to engagement teams during and after rollout.
Manage and support new business exception requests and reconcile prior pre-approved GenAI access and USB device exceptions.
Develop knowledge base articles and align with the CXO Call Center and TSS so frontline support can handle user issues.
Turn lessons learned and exception data into reusable templates and SOPs.
Report impact metrics i.e. users blocked, block alerts, software removed to leadership.
Partner with client account managers, Client PPMDs, client-facing teams, and OGC/C&P stakeholders on escalations, policy exceptions, and decisions.
Maintain clear documentation, runbooks, and ServiceNow records.
Assist with communications to Client Service Professionals.
Take over execution, support, and documentation work from senior staff.
What you’ll bring
Working knowledge of DLP, CASB, URL Filtering, and Endpoint Privilege Management tools
Strong Excel and data reconciliation skills
Familiarity with Active Directory and ServiceNow
Excellent documentation, technical support, and stakeholder coordination skills
A self-starter mindset and comfort in a fast-moving, high-visibility environment
The successful candidate would possess these skills
Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
The team
Deloitte Technology US (DT - US) helps power Deloitte’s success, which serves many of the world’s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.
The ~3,000 professionals in DT - US deliver services including
Cyber Security
Technology Support
Technology & Infrastructure
Applications
Relationship Management
Strategy & Communications
Project Management
Financials
Cyber Security
Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.
Areas of focus include
Risk & Compliance
Identity & Access Management
Data Protection
Cyber Design
Incident Response
Security Architecture
Business Partnership
Qualifications
Required
Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
Minimum 5 total years of various technology related experience.
Minimum 2 years of combined experience in the IT/Cybersecurity space with knowledge of DLP, CASB, Web Proxy URL Filtering and similar data protection technologies.
Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred
Working knowledge of endpoint data protection concepts such as USB and removable media protection, print data exfiltration prevention and unauthorized software blocking.
Strong Excel and data reconciliation skills.
Familiarity with Active Directory and ServiceNow ticketing processes.
Master’s degree in a relevant field
Experience supporting regulated clients, especially financial services industry
Experience with policy tuning and false-positive reduction, including keyword-based DLP rules.
Experience with GenAI governance or AI usage controls.
Experience with change management, user communications, or support enablement (KB articles, call center alignment).
Experience with multi-jurisdiction or cross-border policy rollouts.
Experience in a consulting or professional services environment.
Relevant certifications (e.g., Security+, CISSP associate, vendor-specific certifications).
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $84,300 to $173,300.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
EA_ExpHire