QRM - Senior Risk Manager, Cyber (Senior Manager) - C_MAT

The Team:

The mission of Quality and Risk Management (QRM) is to manage the risk in our growing and increasingly complex business to improve financial performance and protect the firm's assets and reputation.

Deloitte's Cyber QRM team is seeking a Quality & Risk Manager who will be responsible for supporting Cyber quality and risk management activities across the Cyber Offering Portfolio and Market Offerings. Candidates must have extensive experience in delivering and/or contracting for consulting services and related agreements.

Recruiting for this role ends on 08/28/2026.

• Serves as liaison between firm leadership and the Office of General Counsel and others (National Risk, National Office of Independence, etc.).
• Is responsible for advising practice leadership on potential quality and risk management issues within the Cyber Offering Portfolio that includes Cyber Strategy & Transformation, Cyber Defense & Resilience, Digital Trust & Privacy, Enterprise Security, and Cyber Operate services.
• Provides guidance to engagement leaders and teams on risk mitigation strategies, contract formation, contract terms, and contract management for Cyber services.
• Facilitates internal compliance with contract terms, risk management policies and procedures, and management directives for Cyber services.
• Comfortable in facilitating risk management training to business leaders / business teams when called upon to do so for Cyber services.

• Performs proposal reviews for Cyber opportunities.
• Consults with firm Partners, Principals, Managing Directors, and engagement teams on Requests for Proposals (RFPs), Teaming Agreements, and Non-Disclosure Agreements.
• Conducts Risk Consultations as needed.
• Helps interpret contract requirements and obligations and provides guidance to engagement teams.
• Facilitates early coordination with Office of General Counsel on RFPs where applicable.

• Involved in the negotiation of professional services contracts with a primary focus on reducing and mitigating delivery and contractual risks associated with the services being provided.
• Facilitates the coordination of Office of General Counsel, the business, and clients (where applicable) on contract negotiations.
• Professional services contracts include Master Services Agreements, Managed Services Agreements, Subscription License Agreements, Statements of Work, Engagement Letters, Change Orders, Subcontractor Agreements, Teaming Agreements, Non-Disclosure Agreements, independence consultations, and other similar or related agreements.

• Reviews services contracts (in particular Statements of Work, Engagement Letters, and Change Orders) and provides revisions oriented to mitigating and containing risk aligned with Deloitte policies and procedures and management guidance.
• Available to consult and help interpret requirements of the contract as aligned to the Cyber services as well as associated Master Services Agreements and Managed Services Agreements, where applicable.
• Analyzes and assesses potential impacts associated with contract delivery risks aligned to the Cyber services.
• Where applicable, assists business leadership with contract template development and review to help expedite future risk reviews.
• Provides guidance to reduce in flight project risks, adjusts contract requirements to accommodate changing project circumstances, and manages stakeholder expectations to contractual obligations and agreed upon performance standards.

• Significant experience in negotiating various consulting agreements as identified above.
• Significant experience in advising business teams on developing agreements and contracts
• Significant experience evaluating and assessing Cyber engagements across the Cyber Market Offerings
• Experience in negotiating and managing vendor contracts (buy-side) for third-party software providers, including reseller agreements
• Understanding of the different types of sensitive data (PII, PHI, etc.),…