8/11/26
Apply now
- Start applying with LinkedIn
- Apply Now
Start
- Please wait...
Job Type: Permanent
Work Model: Remote
Reference code: 134501
Primary Location: Toronto, ON
All Available Locations: Toronto, ON
What will your typical day look like?The IT Risk Management: Manager, Cyber Compliance will undertake planning on various Deloitte Technology testing and assessment programs:
- Performing control assessments, complete the remote/virtual onsite assessments with various subject matter experts.
- Managing the completion of various assessment programs to support the identification of control enhancements in end-to-end processes, recommend remediation actions, and share insights and best practices with Deloitte Technology, Member Firms' and Global Lines of Business' Technology as a proactive measure to reduce the likelihood and impact of future risk events •
- Maintain and update the control testing framework, including control-to-standard mappings, technical test queries, policy configuration checks, and clearly defined pass/fail criteria.
- Apply risk management experience to understand how tested controls contribute to risk reduction, assess the impact of control gaps, and support risk-based prioritization of remediation activities.
- Perform compliance validation of risk remediation activities submitted by risk and control owners, assessing whether the evidence provided adequately closes the identified gap.
- Stay current on control testing methodologies, regulatory developments, and industry best practices to inform testing priorities.
About the teamDeloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Enough about us, let's talk about youRequired:- Proven experience within an IT risk related role.
- 2-4 years of professional experience in information security, IT risk management, internal audit, compliance, or controls testing roles.
- Ability to work independently and proactively essential.
- Strong management, communication, technical and remote collaboration skills are a must with the ability to communicate professionally and effectively with staff at all levels
- Ability to coordinate across teams in a large matrix-organization environment.
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
Preferred:- ServiceNow CIS (Certified Implementation Specialist) Risk and/or Compliance certification or ServiceNow System Certified System Administrator (or equivalent)
- A good understanding of IT frameworks including ITIL and COBIT frameworks.
- Relevant certifications such as ISO 27001 Lead Auditor, CISA, CRISC, Security+, or similar are desirable.
Total RewardsThe salary range for this position is $85,000 - $156,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.
Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as "Deloitte Days", dedicated days of for learning (known as Development and Innovation Days), flexible work arrangements and a hybrid work structure.
