Senior Manager - Cyber Assurance

Company Description

At Deloitte, our Purpose is to make an impact that matters for our clients, our people, and society. This is the lens for which our global strategy is set. It unites Deloitte professionals across geographies, businesses, and skills. It makes us better at what we do and how we do it. It enables us to deliver on our promises to stakeholders, while creating the lasting impact we seek.

Harnessing the talent of 457 000+ people located across more than 150 countries and territories, our size and scale puts us in a unique position to help change the world for the better by bringing together the services we provide, the societal investments we make, and the collaborations we advance through our ecosystems.

Deloitte offers career opportunities across Audit & Assurance (A&A), Tax & Legal (T&L) and our Consulting Services business, which is made up of Strategy, Risk & Transactions (SR&T) and Technology & Transformation (T&T).

Deloitte South Africa is seeking an accomplished and forward‑thinking leader to grow our Cyber Assurance capability within the broader Technology Assurance portfolio. This role is ideal for a seasoned professional with extensive experience in cybersecurity governance, control assessments, cloud security assurance, and cyber maturity evaluation – coupled with a strong track record of building teams, driving market growth, and leading complex assurance engagements.

• Drive business development efforts to expand Deloitte's Cyber Assurance practice across South Africa, with support to the Africa Member Firm when needed.
• Originate and convert new opportunities focused on cyber governance, control assurance, cloud security assurance, vulnerability management assurance, and ISO 27001 reviews.
• Build and sustain strong relationships with C‑suite executives, cybersecurity leaders, audit committees, and boards.
• Represent Deloitte as a thought leader on cybersecurity governance, assurance, and risk management.
• Contribute to thought leadership, go‑to‑market strategies, and industry engagements focused on strengthening organisational cyber resilience through assurance‑driven insights.

• Lead and manage complex Cyber Assurance engagements, including:
  • Cybersecurity controls assurance (IT general controls, cybersecurity controls testing).
  • Security governance and operating model assessments.
  • Cloud security assurance across Azure, AWS, and GCP environments.
  • Vulnerability management assurance and cyber maturity assessments.
  • Identity and access management assurance.
  • ISO 27001 control reviews and readiness assessments.
• Ensure all work adheres to leading industry frameworks and standards, including:
  • ISO/IEC 27001
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • Zero Trust principles
  • Cloud security standards across major hyperscalers
  • COBIT
• Drive high‑quality, risk‑based, value‑driven outcomes that enhance clients' cybersecurity posture and control maturity.
• Leverage emerging tools and methodologies to continuously improve assurance delivery.
• Note:
  
  This role is separate from operational cybersecurity services (e.g., tool configuration, pentesting, SOC operations, incident response).

• Build, grow, and lead a high‑performing Cyber Assurance team, scaling from a lean foundation to a robust capability.
• Mentor and develop practitioners at all levels, fostering a culture of excellence, collaboration, inclusion, and continuous skills development.
• Provide technical guidance on cybersecurity frameworks, assurance methodologies, cloud security concepts, and ISO requirements.
• Collaborate with regional and global Deloitte teams to bring leading practices, accelerators, and methodologies to the Africa market.

• 12+ years of experience in cybersecurity assurance, technology risk, IT audit, or related governance roles.
• Proven experience leading complex cyber assurance or cyber governance engagements within a professional services or consulting environment.
• Strong understanding of cybersecurity frameworks and leading practices, including:
  • ISO/IEC 27001
  • NIST CSF
  • CIS Controls
  • Zero Trust architectures
  • Cloud security best practices…