Global Cybersecurity Policies & Standards & SSDLC Leader

Global Cybersecurity Policies & Standards & SSDLC LeaderReference Code 3939

Country:

US Locations: USA - Hermitage; USA - Nashville; USA - Tampa

Deloitte Global is the engine of the Deloitte network.

Our professionals reach across disciplines and borders to develop and lead global initiatives.

We deliver strategic programs and services that unite our organization.

Work you'll do

Lead Deloitte's Global Cybersecurity Policies & Standards Program and the Global Secure Software Development Life Cycle (SSDLC) Program.

You will own the development, maintenance, and enterprise roll‑out of an authoritative suite of global cybersecurity policies and standards that map to key GRC and technology processes (SSDLC Optimization, Internal Automated Compliance Assessment, VCRA, ISO 27001).

You will also run the Global SSDLC program and its transformation to deliver consistent, trusted reviews across Member Firms and to advance secure development practices organization‑wide.

The Senior Manager, Cyber Policy and Standards additonally will:

Lead and own the end-to-end lifecycle (drafting, review, approval, publishing, maintenance) of Deloitte's Global Cybersecurity policies and standards.

Maintain and expand a mature, scalable suite of technical standards and implementation guidance, apply deep subject-matter expertise to set strategic and technical direction, drive stakeholder alignment and governance, ensure practical adoption across teams and vendors, and continuously evolve standards to address emerging risks and architectures.

Lead and refine Deloitte's Global SSDLC program requirements for Deloitte firm SSDLC teams.

Ensure consistent, risk-based application reviews across technology assets, redesign processes and tooling, leveraging automation to accelerate security review cycle times without reducing rigor, while enabling scalable, repeatable review pipelines.

Provide implementation guidance and escalation support as required to Deloitte firm SSDLC teams.

Lead and develop a team of specialists, set strategic direction and priorities, align resources and vendors to business objectives, establish governance and SLAs, track program performance and delivery, and drive continuous improvement to ensure outcomes are met.

Ensure standards are authoritative, actionable, and mapped to frameworks and controls (e.g., ISO 27001, Internal compliance (MFS12) and Vendor Cyber Risk Assessments).

Integrate cybersecurity policies and SSDLC requirements into downstream GRC initiatives and programs.

Provide SME to support control implementation and evidence collection required for industry certifications.

Maintain technical documentation and comprehensive audit trails to ensure compliance, traceability, and readiness in support of audits.

Engage and influence senior stakeholders (Deloitte Firm CISOs and CTOs) to build strong relationships, understand and reconcile multiple perspectives, and drive initiatives forward to consensus through clear, compelling commu...