Senior Consultant Cyber Engineering – BISO
Deloitte US · Multiple Locations · $102,500–$210,600 (stated in the posting)
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology US (DT - US). We are curious and life-long learners focused on technology and innovation.
Recruiting for this role ends on 11/20/2026.
Work you’ll do
The GPS BISO Consultant works with technical and non-technical stakeholders to support the Government and Public Services (GPS) Business Information Security Officer (BISO) function. The Consultant applies cybersecurity expertise to assess risks, recommend mitigation approaches, and help maintain the security posture of systems and applications that support business operations and client delivery.
The role supports the development of IT solutions by contributing to security reviews of solution architectures, particularly cloud-based solutions. Responsibilities include helping define security requirements, design specifications, and compliance controls, and assessing alignment with security policies, standards, and industry practices. Working across technical and business teams, the Consultant helps apply a consistent security approach while supporting evolving technology, innovation, and cloud migration needs.
.
Responsibilities:
- Review detailed application security architecture for GPS solutions.
- Integrate security requirements into DevOps processes. Ensure application development follows Secure Development Lifecycle (SDLC) requirements.
- Serve as a trusted advisor to solution architects, developers, technical risk analysts, and others on information security principles, standards, and best practices.
- Assist in the socialization and adoption of enterprise security and compliance requirements.
- Create and validate application security requirements to meet business goals.
- Maintain awareness of evolving application security threats and counsel development, business, and risk stakeholders.
- Maintain awareness of AI tools and technologies; influence roadmaps to align with business needs.
- Oversee and drive the design and implementation of application security controls in support of compliance requirements.
The successful candidate would possess these skills
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Deloitte Technology US (DT - US) helps power Deloitte’s success. DT - US drives Deloitte, which serves many of the world’s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.
The ~3,000 professionals in (DT - US) deliver services including:
- Cyber Security
- Technology Support
- Technology & Infrastructure
- Applications
- Relationship Management
- Strategy & Communications
- Project Management
- Financials
Cyber Security
Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.
Areas of focus include:
- Risk & Compliance
- Identity & Access Management
- Data Protection
- Cyber Design
- Incident Response
- Security Architecture
- Business Partnership
Qualifications
Required:
- Bachelor’s degree or equivalent in Computer Science, Engineering, Information Security, Information Systems, Information Technology.
- Minimum 8 years of various technology experience.
- Minimum 6 years of combined technical experience in cybersecurity, technology risk management, risk assessment experience, or previous client-service experience including Cloud and Security training course or certification.
- Must be able to obtain US Government security clearance
Preferred:
- Advanced generalist - organizational skills and experience, including project- or role-based experience in the following: policy and standards, risk management and reporting, and change management/adoption. Must be able to plan, drive and deliver on assigned projects and initiatives with minimal supervision
- GCP or Azure Cloud training or experience
- AI/ML training or experience
- API security training or experience
- Master’s degree in science or engineering
- Experience supporting SDLC processes with a deep understanding of Deloitte’s Cyber Design Studio,
- Experience supporting and performing cyber reviews and security assessments of proposed application and software builds in accordance with member firm policies and standards
- Ability to review and understand cloud architecture and infrastructure drawings and provide compliance guidance to stakeholder teams
- Familiarity with ISO standards, NIST 800-53, 800-171, 800-218 guidelines
- Demonstrated experience driving strategy with cross-functional teams and executive level stakeholders and deliver on flowed down business goals
- Demonstrated ability to drive organizational change and work with multiple business units of an organization to effect change
- Exceptional verbal and written communication skills. Must be able to interact effectively with professionals at all levels and communicate recommendations with diplomacy and tact.
- Ability to frame and communicate security and risk-related concepts to technical and nontechnical audiences at various levels
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $102,500 to $210,600.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
EA
ExpHire
001688
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology US (DT - US). We are curious and life-long learners focused on technology and innovation.
Recruiting for this role ends on 11/20/2026.
Work you’ll do
The GPS BISO Consultant works with technical and non-technical stakeholders to support the Government and Public Services (GPS) Business Information Security Officer (BISO) function. The Consultant applies cybersecurity expertise to assess risks, recommend mitigation approaches, and help maintain the security posture of systems and applications that support business operations and client delivery.
The role supports the development of IT solutions by contributing to security reviews of solution architectures, particularly cloud-based solutions. Responsibilities include helping define security requirements, design specifications, and compliance controls, and assessing alignment with security policies, standards, and industry practices. Working across technical and business teams, the Consultant helps apply a consistent security approach while supporting evolving technology, innovation, and cloud migration needs.
.
Responsibilities:
- Review detailed application security architecture for GPS solutions.
- Integrate security requirements into DevOps processes. Ensure application development follows Secure Development Lifecycle (SDLC) requirements.
- Serve as a trusted advisor to solution architects, developers, technical risk analysts, and others on information security principles, standards, and best practices.
- Assist in the socialization and adoption of enterprise security and compliance requirements.
- Create and validate application security requirements to meet business goals.
- Maintain awareness of evolving application security threats and counsel development, business, and risk stakeholders.
- Maintain awareness of AI tools and technologies; influence roadmaps to align with business needs.
- Oversee and drive the design and implementation of application security controls in support of compliance requirements.
The successful candidate would possess these skills
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Deloitte Technology US (DT - US) helps power Deloitte’s success. DT - US drives Deloitte, which serves many of the world’s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.
The ~3,000 professionals in (DT - US) deliver services including:
- Cyber Security
- Technology Support
- Technology & Infrastructure
- Applications
- Relationship Management
- Strategy & Communications
- Project Management
- Financials
Cyber Security
Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.
Areas of focus include:
- Risk & Compliance
- Identity & Access Management
- Data Protection
- Cyber Design
- Incident Response
- Security Architecture
- Business Partnership
Qualifications
Required:
- Bachelor’s degree or equivalent in Computer Science, Engineering, Information Security, Information Systems, Information Technology.
- Minimum 8 years of various technology experience.
- Minimum 6 years of combined technical experience in cybersecurity, technology risk management, risk assessment experience, or previous client-service experience including Cloud and Security training course or certification.
- Must be able to obtain US Government security clearance
Preferred:
- Advanced generalist - organizational skills and experience, including project- or role-based experience in the following: policy and standards, risk management and reporting, and change management/adoption. Must be able to plan, drive and deliver on assigned projects and initiatives with minimal supervision
- GCP or Azure Cloud training or experience
- AI/ML training or experience
- API security training or experience
- Master’s degree in science or engineering
- Experience supporting SDLC processes with a deep understanding of Deloitte’s Cyber Design Studio,
- Experience supporting and performing cyber reviews and security assessments of proposed application and software builds in accordance with member firm policies and standards
- Ability to review and understand cloud architecture and infrastructure drawings and provide compliance guidance to stakeholder teams
- Familiarity with ISO standards, NIST 800-53, 800-171, 800-218 guidelines
- Demonstrated experience driving strategy with cross-functional teams and executive level stakeholders and deliver on flowed down business goals
- Demonstrated ability to drive organizational change and work with multiple business units of an organization to effect change
- Exceptional verbal and written communication skills. Must be able to interact effectively with professionals at all levels and communicate recommendations with diplomacy and tact.
- Ability to frame and communicate security and risk-related concepts to technical and nontechnical audiences at various levels
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $102,500 to $210,600.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
EA
ExpHire
001688
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology US (DT - US). We are curious and life-long learners focused on technology and innovation.
Recruiting for this role ends on 11/20/2026.
Work you’ll do
The GPS BISO Consultant works with technical and non-technical stakeholders to support the Government and Public Services (GPS) Business Information Security Officer (BISO) function. The Consultant applies cybersecurity expertise to assess risks, recommend mitigation approaches, and help maintain the security posture of systems and applications that support business operations and client delivery.
The role supports the development of IT solutions by contributing to security reviews of solution architectures, particularly cloud-based solutions. Responsibilities include helping define security requirements, design specifications, and compliance controls, and assessing alignment with security policies, standards, and industry practices. Working across technical and business teams, the Consultant helps apply a consistent security approach while supporting evolving technology, innovation, and cloud migration needs.
.
Responsibilities:
- Review detailed application security architecture for GPS solutions.
- Integrate security requirements into DevOps processes. Ensure application development follows Secure Development Lifecycle (SDLC) requirements.
- Serve as a trusted advisor to solution architects, developers, technical risk analysts, and others on information security principles, standards, and best practices.
- Assist in the socialization and adoption of enterprise security and compliance requirements.
- Create and validate application security requirements to meet business goals.
- Maintain awareness of evolving application security threats and counsel development, business, and risk stakeholders.
- Maintain awareness of AI tools and technologies; influence roadmaps to align with business needs.
- Oversee and drive the design and implementation of application security controls in support of compliance requirements.
The successful candidate would possess these skills
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Deloitte Technology US (DT - US) helps power Deloitte’s success. DT - US drives Deloitte, which serves many of the world’s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.
The ~3,000 professionals in (DT - US) deliver services including:
- Cyber Security
- Technology Support
- Technology & Infrastructure
- Applications
- Relationship Management
- Strategy & Communications
- Project Management
- Financials
Cyber Security
Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.
Areas of focus include:
- Risk & Compliance
- Identity & Access Management
- Data Protection
- Cyber Design
- Incident Response
- Security Architecture
- Business Partnership
Qualifications
Required:
- Bachelor’s degree or equivalent in Computer Science, Engineering, Information Security, Information Systems, Information Technology.
- Minimum 8 years of various technology experience.
- Minimum 6 years of combined technical experience in cybersecurity, technology risk management, risk assessment experience, or previous client-service experience including Cloud and Security training course or certification.
- Must be able to obtain US Government security clearance
Preferred:
- Advanced generalist - organizational skills and experience, including project- or role-based experience in the following: policy and standards, risk management and reporting, and change management/adoption. Must be able to plan, drive and deliver on assigned projects and initiatives with minimal supervision
- GCP or Azure Cloud training or experience
- AI/ML training or experience
- API security training or experience
- Master’s degree in science or engineering
- Experience supporting SDLC processes with a deep understanding of Deloitte’s Cyber Design Studio,
- Experience supporting and performing cyber reviews and security assessments of proposed application and software builds in accordance with member firm policies and standards
- Ability to review and understand cloud architecture and infrastructure drawings and provide compliance guidance to stakeholder teams
- Familiarity with ISO standards, NIST 800-53, 800-171, 800-218 guidelines
- Demonstrated experience driving strategy with cross-functional teams and executive level stakeholders and deliver on flowed down business goals
- Demonstrated ability to drive organizational change and work with multiple business units of an organization to effect change
- Exceptional verbal and written communication skills. Must be able to interact effectively with professionals at all levels and communicate recommendations with diplomacy and tact.
- Ability to frame and communicate security and risk-related concepts to technical and nontechnical audiences at various levels
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $102,500 to $210,600.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
EA
ExpHire
001688