Senior Consultant/Manager | Cyber | Extended Enterprise

As a Senior Consultant/Manager in Extended Enterprise at Deloitte, you will demonstrate and develop your capabilities across various cybersecurity domains. The role requires strong technical knowledge in areas such as Governance, Compliance, Risk Management, Cloud Security, and Data Privacy, among others. You will lead and manage cybersecurity and data privacy controls assessments for third parties and vendors, align with industry standards, and communicate findings to stakeholders and regulatory bodies.

Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time

Key Responsibilities:

• Conduct and manage third-party cybersecurity assessments.
• Review and analyze control evidence, independent assurance reports, and certifications.
• Support contract reviews with procurement and legal teams.
• Perform risk assessments to evaluate inherent and residual cybersecurity risks.
• Develop action plans and timelines for implementing risk controls and track remediation.
• Maintain a third-party cybersecurity risk register for the organization.
• Manage risk assessment tools and GRC solutions.
• Prepare documentation supporting the third-party cyber risk management framework.
• Lead the development of cybersecurity risk reports and dashboards.
• Deliver training materials to educate employees on third-party risks.

Qualifications/Requirements:

• Bachelor's degree in computer science, information security, or related field; Master's degree preferred.
• Relevant certifications such as CISM, CISSP, CISA, CRISC, or CGRC.
• 5-10 years of relevant experience in the field.

Language Requirements:

• Proficiency in English; knowledge of Arabic is an advantage.