Consultant - Manager| Cyber Operate | Strategy & Architecture | KSA

About Deloitte: When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including Best Employer in the Middle East, and Best Consulting Firm, and the Middle East Training & Development Excellence Award.

Our Purpose

Deloitte makes an impact that matters. Every day we challenge ourselves to do what matters most—for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations and supporting our communities.

Our shared values guide the way we behave to make a positive, enduring impact:

• Lead the way
• Serve with integrity
• Take care of each other
• Foster inclusion
• Collaborate for measurable impact
  
  

During your tenure as a Consultant - Manager, you will demonstrate and develop your capabilities in the following areas.

Assess and set direction

• Assess current cybersecurity posture and maturity against NCA ECC-2:2024, NIST CSF 2.0 and ISO/IEC 27001:2022, and produce the current-state and maturity assessment report
• Define the target state, vision and guiding principles, turning ambiguity into clear options and a recommended path, and author the cybersecurity strategy
• Benchmark against peer organisations of similar scale, regulated KSA entities and global leading practice
  
  

Design the operating model

• Design and document the target operating model: structure, roles, RACI, capability map, and the split between in-house, managed-service and outsourced work
• Define the interfaces between cybersecurity, IT, OT, risk, legal, procurement and the business
  
  

Build the roadmap and business case

• Build the 3–5 years roadmap of costed initiatives, prioritized by risk reduction, regulatory need and cost, and keep it realistic for what the organisation can actually deliver, not a textbook ideal
• Prepare business cases, the investment profile and the annual budget input, linking security spend clearly to business value and risk reduction
• Track roadmap delivery and benefits; re-prioritize as development plans change
  
  

Advise and report

• Advise the CISO, steering committee and executives with confidence, handle challenge and push-back, and run strategy workshops
• Define strategic KPIs and KRIs with the Performance Management team
• Produce quarterly strategy and roadmap progress reports and board-level papers
  
  

Leadership Capabilities

• Builds own understanding of our purpose and values; explores opportunities for impact.
• Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent.
• Understands expectations and demonstrates personal accountability for keeping performance on track.
• Actively focuses on developing effective communication and relationship-building skills.
• Understands how their daily work contributes to the priorities of the team and the business. 
  
  

Qualifications

• Years of experience: 2-10 years total years
• Bachelor's in cybersecurity, computer science, engineering or a related field, Master's degree or MBA is preferred.
• Has personally delivered (not just supported) at least one cybersecurity strategy, operating model or transformation roadmap for a large or regulated organisation (Senior and Mid)
• Working knowledge of NCA ECC, NIST CSF 2.0 and ISO/IEC 27001
• Strong written English and executive presentation skills
• KSA or GCC government, large-scale development or critical-infrastructure experience
• Consulting background (Big 4 or strategy firm) is preferred.
• Arabic language is preferred.
• At least one preferred: CISSP, CISM, CGEIT, CRISC. Also valued: ISO 27001 Lead Implementer/Auditor, PMP/PgMP.