Manager, Resilience Architect, Cyber and Technology Resilience

We are a team of cyber and technology resilience professionals working within the wider Deloitte Technology and Transformation practice, helping our clients to withstand and recover from disruptions. We deliver projects to uplift capabilities, work with organisations to meet regulatory requirements, develop operating models and programme roadmaps, and prepare organisations to be resilient against a wide range of risks and threats.

As a Cyber and Technology Resilience Strategist within Deloitte's Cyber practice, you will play a pivotal role in advising our clients on uplifting their cyber and technology resilience capabilities. You will leverage technical expertise and strategic insight to provide guidance, input and leadership as they build robust resilience solutions, across a specific client industry (either financial services or a corporates subsector, i.e. TMT, Consumer, ER&I, or LSHC).

Your responsibilities will evolve with your grade, encompassing a blend of resilience advisory, client engagement, business development, and internal practice development. As a Cyber Resilience Strategist, you will be primarily advising clients around the following five key solutions:

1. Advanced enterprise-wide backup and recovery solutions
2. Automated failover and recovery
3. Resilient cloud based architecture and design (multi-region, multi-cloud, cloud native, DRaaS)
4. Data centre architecture, engineering and supporting technologies
5. ZTNA Networks
6. Container, Cluster and Load Balancing

For each of these solutions, specific projects are likely to include:

• Evaluation of datacentres, cloud environments, and network architecture from a resilience and recoverability perspective, identifying single points of failure, failover strategies, or latency risks
• Lead the detailed gathering and analysis of client business and technical requirements to define comprehensive cyber resilience strategies
• Performing capability assessments against resilience good practice frameworks and target state definition for resilience uplift projects, including roadmap development and prioritisation
• Defining cyber resilience and recovery strategies to enable recovery of minimum viable businesses from cyber disruptions, utilising resilient backup technologies (isolated, immutable, intelligent, etc)
• Delivering resilient migration strategies for clients e.g. datacentre migrations and cloud migrations, ensuring business continuity and operational resilience
• Designing resilient operating model frameworks for IT service management to embed new technologies within a client's existing IT operating environment
• Documenting, exercising and testing cyber recovery processes e.g. application rebuild from backup, end-to-end business service recovery, bare metal restore of foundational infrastructure and tooling
• Supporting client regulatory compliance and response for new and evolving requirements and good practice, e.g. through benchmarking exercises
• Additionally, the following general responsibilities encompassing business and practice development are anticipated:
• Client relationship development and networking, including both building on existing relationships and developing new relationships within or outside of client engagements
• Producing materials for client and internal purpose, e.g. eminence activities, go to market plans, client proposals, client deliverables, executive presentations
• Working with alliance partnerships to create a pipeline of work, and deliver against that pipeline
• Leading proposals for client work and driving the sale through to completion including contracting and risk management
• Leading client engagements for financial services or corporates (TMT, ER&I, LSHC or Consumer focus) clients, often balancing multiple projects at once alongside side of desk activity
• Delivering projects in complex and time-pressured circumstances, adhering to standard project management approaches
• Contributing to the eminence of the Deloitte Cyber and Technology Resilience team
• Supporting and promoting team culture, development and talent

Successful applicants typically have a degree or equivalent experience, with real world experience working in cyber and / or technology resilience. They are agile thinkers capable of helping stakeholders manage a range of security challenges.

Key skills - not every candidate requires all of these but should be familiar and/or have experience with a majority of these:

• Capability to communicate cyber and technology resilience issues to a variety of stakeholders up to Board level, covering both business and technical lenses
• Knowledge and experience working with a variety of backup technologies, replication services, and resilience solution providers (e.g. Commvault, Dell Technologies, Rubrik)
• Insight into relevant regulatory guidance and legislation globally, how these guidelines apply to technology resilience, and how different organisations are adhering to latest guidance
• Expertise with resilient operating model frameworks, including definition of supporting service management processes to securely embed new solutions within an existing operating environment and stand up the required processes to minimise the chance of disruptions
• Working knowledge of resilience standards and frameworks and how these can be utilised by clients to embed resilience
• Building strong client relationships, in particular within engagement delivery, and the ability to grow and build client relationships outside of delivery
• Long standing resilience and financial services OR corporates (TMT, ER&I, LSHC or Consumer focus) industry experience with a solid knowledge of resilience across specific industries, and network of relationships across clients
• Solid capability to produce client friendly materials, presenting complex ideas simply and professionally across a range of artefacts from proposals to solution documentation
• Ability to understand client problems and issues and develop a proposal for how we can support
• Commercial capability to develop proposals, produce cost estimates, propose compelling commercial offers and present well to clients
• Strong project management skills and experience, particularly the ability to drive activity in complex environments and under time pressure
• Ability to navigate difficult, complex, and unfamiliar client processes in addition to other commitments, * Cyber certifications, such as cloud service provider certificates (AWS, Azure or Google), and other relevant certifications (e.g. UK CSC, CIISec, SABSA, TOGAF, CISSP, CCSP, CISM, CISA) may be valuable but are not essential
• Certifications in project management or related domains (e.g. PRINCE2, ITIL, COBIT5) may be valuable but are not essential

Deloitte drives progress. Our firms around the world help our clients become market leaders wherever they compete. Deloitte invests in outstanding people with diverse talents and backgrounds, empowering them to achieve more than they can elsewhere. Our work combines consulting with action and integrity. We believe that when our clients and society are stronger, so are we.