Cybersecurity Risk Management Consultant

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity.

Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape.

Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Work You'll Do

As a Software Engineer III on the team, you will:


* Advise Government & Public Services clients in executing the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) lifecycle to mitigate cyber risk and threats


* Advise federal agency clients on cyber risk posture and RMF compliance strategies aligned to FISMA, NIST, and agency-specific requirements


* Lead the development and/or review of Authority to Operate (ATO) packages (e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms))


* Assess or develop an organization's cyber risk strategy as it relates to data risk, cyber risk management, risk frameworks and policies, and risk measures and reporting


* Strategically drive the development and execution of risk assessments and mitigation plans to enhance the client's ability to identify, evaluate, prioritize, and mitigate risks


* Implement risk management solutions aligned to the client's vision and strategic priorities


* Drive development and implementation of cyber strategies grounded in leading practices, industry frameworks, and targeted to the client's risk and business needs


* Synthesize technical findings and risk data into actionable reports and executive-level briefings


* Develop impactful presentations that support engagement goals, communicate technical findings clearly to both technical and executive audiences


* Deliver key messages with clarity and confidence; tailor communication style to the audience


* Understand how business functions operate and how industry trends impact a client's cyber posture and risk profile


* Identify and evaluate complex business and technology risks, and connect findings to business impact


* Provide guidance and quality review to junior team members on RMF documentation, assessment artifacts, and deliverable development


* Participate in team problem-solving efforts and offer ideas to address client challenges


* Identify opportunities for efficiencies in work processes and innovative approaches to completing scope of work


* Own assigned work products through final review, client submission, and resolution of quality-review comments


* Assist in proposal development, as requested

A successful candidate would possess these skills:


* Ability to work independently and collaborate as part of a team


* Effective written and verbal communication skills


* Meticulous attention to detail and quality of work product...