SENIOR CONSULTANT CYBER ENGINEERING – BISO

Cyber and Technology Risk | Client and Business Cyber Services

Same job available in 30 locations

• Birmingham, Alabama, United States
• Boise, Idaho, United States
• Cincinnati, Ohio, United States
• Cleveland, Ohio, United States
• Colorado Springs, Colorado, United States
• Columbus, Ohio, United States
• Davenport, Iowa, United States
• Des Moines, Iowa, United States
• Grand Rapids, Michigan, United States
• Hermitage, Tennessee, United States
• Indianapolis, Indiana, United States
• Jacksonville, Florida, United States
• Kansas City, Missouri, United States
• Louisville, Kentucky, United States
• Mechanicsburg, Pennsylvania, United States
• Memphis, Tennessee, United States
• Midland, Michigan, United States
• Nashville, Tennessee, United States
• New Orleans, Louisiana, United States
• Omaha, Nebraska, United States
• Pittsburgh, Pennsylvania, United States
• Rochester, New York, United States
• Salt Lake City, Utah, United States
• San Antonio, Texas, United States
• St. Louis, Missouri, United States
• Tallahassee, Florida, United States
• Tampa, Florida, United States
• Tempe, Arizona, United States
• Tulsa, Oklahoma, United States
• Williamsville, New York, United States

POSITION SUMMARY

Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology US (DT - US). We are curious and life-long learners focused on technology and innovation.

Recruiting for this role ends on 11/20/2026.

Work you’ll do

The GPS BISO Consultant works with technical and non-technical stakeholders to support the Government and Public Services (GPS) Business Information Security Officer (BISO) function. The Consultant applies cybersecurity expertise to assess risks, recommend mitigation approaches, and help maintain the security posture of systems and applications that support business operations and client delivery.

Responsibilities:

• Review detailed application security architecture for GPS solutions.
• Integrate security requirements into DevOps processes. Ensure application development follows Secure Development Lifecycle (SDLC) requirements.
• Serve as a trusted advisor to solution architects, developers, technical risk analysts, and others on information security principles, standards, and best practices.
• Assist in the socialization and adoption of enterprise security and compliance requirements.
• Create and validate application security requirements to meet business goals.
• Maintain awareness of evolving application security threats and counsel development, business, and risk stakeholders.
• Maintain awareness of AI tools and technologies; influence roadmaps to align with business needs.
• Oversee and drive the design and implementation of application security controls in support of compliance requirements.

The successful candidate would possess these skills

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

The team

Deloitte Technology US (DT - US) helps power Deloitte’s success. DT - US drives Deloitte, which serves many of the world’s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.

Cyber Security

Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.

Qualifications

Required:

• Bachelor’s degree or equivalent in Computer Science, Engineering, Information Security, Information Systems, Information Technology.
• Minimum 8 years of various technology experience.
• Minimum 6 years of combined technical experience in cybersecurity, technology risk management, risk assessment experience, or previous client-service experience including Cloud and Security training course or certification.
• Must be able to obtain US Government security clearance

Preferred:

• Advanced generalist - organizational skills and experience, including project- or role-based experience in the following: policy and standards, risk management and reporting, and change management/adoption. Must be able to plan, drive and deliver on assigned projects and initiatives with minimal supervision
• GCP or Azure Cloud training or experience
• AI/ML training or experience
• API security training or experience
• Master’s degree in science or engineering
• Experience supporting SDLC processes with a deep understanding of Deloitte’s Cyber Design Studio,
• Experience supporting and performing cyber reviews and security assessments of proposed application and software builds in accordance with member firm policies and standards
• Ability to review and understand cloud architecture and infrastructure drawings and provide compliance guidance to stakeholder teams
• Familiarity with ISO standards, NIST 800-53, 800-171, 800-218 guidelines
• Demonstrated experience driving strategy with cross-functional teams and executive level stakeholders and deliver on flowed down business goals
• Demonstrated ability to drive organizational change and work with multiple business units of an organization to effect change
• Exceptional verbal and written communication skills. Must be able to interact effectively with professionals at all levels and communicate recommendations with diplomacy and tact.
• Ability to frame and communicate security and risk-related concepts to technical and nontechnical audiences at various levels

Salary Information

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $102,500 to $210,600.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.