Controls Assurance: Cloud Assurance

About Deloitte

At Deloitte, our Purpose is to make an impact that matters for our clients, our people, and society. This is the lens for which our global strategy is set. It unites Deloitte professionals across geographies, businesses, and skills. It makes us better at what we do and how we do it. It enables us to deliver on our promises to stakeholders, while creating the lasting impact we seek.

Harnessing the talent of 450,000+ people located across more than 150 countries and territories, our size and scale puts us in a unique position to help change the world for the better—by bringing together the services we provide, the societal investments we make, and the collaborations we advance through our ecosystems.

Deloitte offers career opportunities across Audit & Assurance (A&A), Tax & Legal (T&L) and our Consulting services business, which is made up of Strategy, Risk & Transactions Advisory (SR&T) and Technology & Transformation (T&T). 

Are you ready to apply your knowledge and background to exciting new challenges? From learning to leadership, this is your chance to take your career to the next level. 

About the Division

 The value that Deloitte Controls Assurance creates for organisations is synonymous with operational excellence. Our business areas work in unison to provide integrated solutions unique to the organisational requirements of any business.

In a world that is constantly changing, organisations need to adapt quickly to respond to new risks and take advantage of new opportunities. Deloitte's IT Controls Assurance practice advises organisations on how to effectively mitigate risk and make informed and intelligent risk decisions around business processes, technology and operations.

What Impact will you make

Every day, your work will make an impact that matters, while you thrive in a dynamic culture of inclusion, collaboration and high performance. As the undisputed leader in professional services, Deloitte is where you will find unrivalled opportunities to succeed and realize your full potential.

Main Purpose of Job

Supports the business leadership in the sales and delivery of Cloud Assurance Advisory service offerings. Builds high performing teams to deliver on client engagements. Applies deep knowledge of disruptive trends and competitor activity to drive continuous improvement in the Cloud Risk space. 

Technical Competencies:

• Proven winning business, staff development, exceptional delivery, business development, continuous improvement.
• Bring deep technical (SME) and industry experience in selected Cloud sub offering (domain) to engage with clients and key stakeholders pragmatically.
• Understands technical complexity at Network, Application, Database, Infrastructure and Cloud level.
• Understand and interpret complex cloud-related business challenges and has a demonstrated ability to respond by conceiving innovative Cloud Risk solutions for clients.
• Strong on design and delivery of end-to-end information security Cloud solutions which are enabled by technology and can think independently and creatively when formulating cloud solutions.
• Strong in the field of current cloud technologies and their applications within a business context.
• Experience in translating clients' risk, security, and compliance requirements into specific Cloud Risk solutions and design patterns.
• Applying Cloud Security Reference Architectures to deliver consistent, standardized solutions for Identity & Access Management and Cloud related technology.
• Designing solutions for managing risk for integration between Cloud and on-premises security solutions.
• Solutions Architect experience preferable.
• Experience in technology risk assessments and controls implementation

Collaborating and coordinating solution design and development work with other sub offerings.

Managing risk in public, private and hybrid cloud solutions

• Utilizing and applying knowledge of Cloud solutions across IaaS, PaaS & SaaS into projects, such as AWS, Google and Azure.
• Laws and regulations related to Information Security, Data Protection and/or Privacy especially where relevant to the Cloud.
• Good technical capability and technical certifications in the following areas: 
• Cloud Security engineering/design/operations:

CCSP - Certified Cloud Security Professional [ISC2]

AWS Solution Architect

SalesForce, and other SaaS solutions specific security topics

• Amazon and/or Microsoft certified Solutions Architect.
• Ability to identify patterns, and analyse and improve processes and controls
• IT System and networks design, build and administration
• Project Management including Agile Project Management
• DevOps toolsets (CI/CD pipeline) and corresponding DevSecOps capabilities
• Microservices, containerisation, server-less computing/FaaS
• Related Technical fundamentals at that point in time and what the market is procuring

Behavioural Competencies:

• Exceptional communication skills, both written and verbal
• Able to deliver multiple engagements on time and within budget
• Proven ability to make decisions and the right judgement calls in complex projects and situations
• Creates a culture of trust, ownership and accountability across teams and projects
• On the job coaching for managers and professional staff and taking accountability for multiple large engagements
• Manages large engagement / multiple engagement deadlines holistically, identifying risks and escalating
• Drives continuous improvement
• Custodian of the business, shaping offerings that we need to proactively take to the market

Minimum Qualifications

Relevant Degree, Honours or post graduate diploma, professional qualifications e.g. B.Sc, BCom,

Desired Qualifications

Advanced certifications, diplomas, professional certifications, advanced degrees in  Cyber or information security - examples include:

• CISM (Certified Information Security Manager) and / or CISA(Certified Information Systems Auditor)
• CCSP (Certified Cloud Security Professional)
• AWS Certified Cloud Practitioner and/or Microsoft AZ 900 or suitable hands-on experience is required.
• AWS Security and/ or Microsoft AZ 500 advantageous

Desired Experience

5 years in a client facing role; 2 of these in a management role

5 years of progressive experience with one or more years of Cloud specific experience, with role(s) in a professional, consulting services, public and/or private sector organizations is required.

• Experience in translating clients' cloud risk into specific Cloud solutions and design patterns;
• Applying Cloud Reference Architecture to deliver consistent, standardized solutions for Identity and Access Management, Data Protection, Secure DevOps, Security Operations, and other security domains;
• Designing solutions for integration between Cloud and on-premises security solutions;

At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.

Note: The list of tasks / duties and responsibilities contained in this document is not necessarily exhaustive. Deloitte may ask the employee to carry out additional duties or responsibilities, which may fall reasonably within the ambit of the role profile, depending on operational requirements.

Be careful

Don't provide your bank or credit card details when applying for jobs.

It is strictly against Deloitte policy for candidates to pay any fee in relation to our recruitment process. No recruitment agency working with Deloitte will ask candidates to pay a fee at any time.

At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.

Note: The list of tasks / duties and responsibilities contained in this document is not necessarily exhaustive.  Deloitte may ask the employee to carry out additional duties or responsibilities, which may fall reasonably within the ambit of the role profile, depending on operational requirements.

Be careful of Recruitment Scams: Fraudsters or employment scammers often pose as legitimate recruiters, employers, recruitment consultants or job placement firms, advertising false job opportunities through email, text messages and WhatsApp messages. They aim to cheat jobseekers out of money or to steal personal information.

To help you look out for potential recruitment scams, here are some Red Flags:

• Upfront Payment Requests: Deloitte will never ask for any upfront payment for background checks, job training, or supplies.
• Requests for Personal Information: Be wary if you are asked for sensitive personal information, especially early in the recruitment process and without a clear need for it. Fraudulent links or contractual documents may require the provision of sensitive personal data or copy documents (e.g., government issued numbers or identity documents, passports or passport numbers, bank account statements or numbers, parent's data) that may be used for identity fraud. Do not provide or send any of these documents or data. Please note we will never ask for photographs at any stage of the recruitment process.
• Unprofessional Communication: Scammers may communicate in an unprofessional manner. Their messages may be filled with poor grammar and spelling errors. The look and feel may not be consistent with the Deloitte corporate brand.

If you're unsure, make direct contact with Deloitte using our official contact details. Be careful not to use any contact details provided in the suspicious job advertisement or email.