Security Risk Analyst


Creativity is encouraged; innovation is expected. At Deloitte, we are all responsible for challenging the status quo, and bringing innovative and “…and different” thinking to everything we do.

About the role

We are recruiting for a security risk analyst to join our internal CISO team in Sydney. As part of a larger team, the successful candidate will have the opportunity to exercise their risk management, internal audit and process improvement skills across a portfolio of our internal confidentiality and security risk management activities:

  • Contribute to the operation and management of our ISO-27001 ISMS
  • Assist in the conduct of security risk assessments;
  • Create, review and update policies, standards and procedures
  • Support internal security audit activities
  • interview stakeholders across the business
  • Support the operations of the Confidentiality Office
  • Assess confidentiality, privacy or security risks in our products and services
  • Provide risk management advice to client engagement teams
  • Assist in the roll-out of the confidentiality program to the business
  • Assist in the development and delivery of training and awareness initiatives
  • Consult with and provide advice to our Partners and staff regarding recommended information security practices and architectures
  • Contribute to our security risk intelligent culture strategies and author communications

This is an exciting opportunity to develop a career in information security governance, risk and compliance at Deloitte Australia. There will be opportunities to lead projects and to implement strategies that will transform the way we do security. This role presents an excellent opportunity for someone to develop their information security expertise and to gain exposure to the entire firm, including senior management.

About the team

Our Confidentiality & Information Security Office (CISO) is Deloitte’s internal security function. It sits within the national risk team and is a key enabler in protecting the green dot. Our goal is to embed security risk intelligent culture across Deloitte through a world class information security program. Such a culture empowers our people, giving them the capacity to act. It also reduces adverse outcomes and helps to cement our reputation for first class service delivery.

About you

We are seeking an individual who is looking to make an impact that matters for our clients, our people and our community. You’ll want to be part of a highly visible internal security team that balances agility and innovation against client security requirements on a daily basis.

You’ll have about 4 years of experience in risk, internal audit and/or security. In particular, you will have:

  • Experience in risk, audit, security or process/controls design
  • Experience implementing, managing or auditing an ISO-27001 ISMS
  • Tertiary level qualification with relevant professional certification
  • Excellent analytical and communication skills, able to present ideas effectively and solve problems using a structured approach
  • Experience with stakeholder management and engagement

About us: Deloitte Culture

We pride ourselves on our team of diverse, high performing Deloitte Professionals who are talented, supportive, inclusive and social – and who are at the heart of our success. Our aim is to ensure that all our people feel comfortable to bring their whole selves to work, and as a result, create a workplace that encourages the true spirit of 'And different'.

From day one at our firm you’ll be considered part of the Deloitte community and our development and career progression framework will help you develop the skills and capabilities you need to succeed – in every sense of the word.

By applying to this job you will be assessed against the Deloitte Global Talent Standards. We’ve designed these standards to provide our clients with a consistent & exceptional Deloitte experience globally.

Next Steps

Sound like the perfect role for you? Apply now!

Please contact Suzanne Dunne from the Deloitte Talent Team if you have any questions about the role.

Are you viewing this job on LinkedIn? Click here to apply