Cyber Phishing Drill Service Senior Analyst, Deloitte Global Technology

Deloitte Canada; Toronto; Hybrid; CAD 69,000 - 114,000; Full time

Job summary

A leading global consulting firm in Toronto is seeking a Cyber Phishing Drill Service Senior Analyst. This role focuses on developing data extraction methods, analyzing user behaviors, and reporting findings. Ideal candidates will have a strong data analysis background, especially within a cybersecurity context. Offering a competitive salary range of $69,000 to $114,000, along with a hybrid work model, this position is perfect for individuals eager to make a significant impact on security protocols.

Benefits

Flexible benefits

Training and development

Competitive salary and bonus program

Qualifications

• Minimum 3+ years in a data analysis role, ideally in cybersecurity or IT risk.
• Proven experience in data extraction techniques and tools, including scripting languages.
• Strong proficiency in statistical analysis and data visualization.

Responsibilities

• Develop data extraction methods using Microsoft Attack Simulator tool.
• Analyze phishing drill results and provide actionable insights.
• Create reports and dashboards to communicate findings.

Skills

Data analysis

Scripting in Python

SQL querying

Statistical analysis

Data visualization

Education

Bachelor’s degree in Computer Science, Data Science, Statistics, Mathematics, IT, or Cybersecurity

Master’s degree (advantageous)

Tools

Python

PowerShell

Power BI

SQL

Azure

Job description

Cyber Phishing Drill Service Senior Analyst, Deloitte Global Technology

Location: Toronto, ON, CA, M5C 3G7

Job Type: Permanent

Work Model: Hybrid

Reference code: 131424

Recruiter: Krista Karger

Primary Location: Toronto, ON

All Available Locations: Toronto, ON; Calgary, AB; Edmonton, AB; Ottawa, ON; Vancouver, BC

Our Purpose

At Deloitte, our Purpose is to make an impact that matters. We exist to inspire and help our people, organizations, communities, and countries to thrive by building a better future. Our work underpins a prosperous society where people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and functioning social and economic institutions, and allows our friends, families, and communities to enjoy the quality of life that comes with a sustainable future. And as the largest 100% Canadian‑owned and operated professional services firm in our country, we are proud to work alongside our clients to make a positive impact for all Canadians.

• Have many careers in one Firm.
• Enjoy flexible, proactive, and practical benefits that foster a culture of well‑being and connectedness.
• Learn from deep subject matter experts through mentoring and on‑the‑job coaching.

What will your typical day look like?

• Developing and implementing robust methods to extract data from the Microsoft Attack Simulator tool, utilizing scripting languages (e.g., Python, PowerShell) and API integrations to automate data collection processes.
• Ensuring data quality, consistency, and integrity during the extraction and ingestion phases.
• Performing in‑depth statistical analysis of phishing drill results, user behaviour, and incident response data; identifying trends, patterns, and anomalies related to user susceptibility, attack vectors, and security control effectiveness.
• Developing metrics and key performance indicators (KPIs) to measure the impact of security awareness training and phishing simulations.
• Creating clear, concise, and impactful reports, dashboards, and presentations to communicate findings and recommendations to clients and internal teams.
• Utilizing data visualization tools (e.g., Power BI) to present complex data in an easily digestible format.
• Providing actionable insights to improve security awareness programs, refine phishing simulation strategies, and strengthen overall cyber defenses.
• Working closely with the SOC, Global Cyber Culture Service, and wider stakeholders to understand requirements and deliver tailored data solutions.
• Contributing to the development of best practices for cyber security data analysis and reporting.

About the team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Enough about us, let’s talk about you

• Education (degree): Bachelor’s degree in a quantitative field such as Computer Science, Data Science, Statistics, Mathematics, Information Technology, Cybersecurity, or a related discipline.
• Master’s degree in a relevant field is advantageous.
• Relevant industry certifications such as Certified Analytics Professional (CAP), CompTIA Data+, or cybersecurity certifications (e.g., CompTIA Security+, CySA+, GSEC) are a plus.
• Years of Experience: Minimum of 3+ years of experience in a dedicated data analysis role, preferably within a cybersecurity, IT risk, or similar technical environment.

Qualifications and Desired Skills

• Proven experience in a data analysis role, ideally within a cyber security context.
• Strong proficiency in data extraction techniques and tools, including:
  • SQL: Advanced querying skills for relational databases.
  • Scripting Languages: Expertise in Python (e.g., Pandas, NumPy for data manipulation, Requests for API interaction) or PowerShell for data extraction, automation, and log parsing.
  • API Integration: Experience in connecting to and extracting data from various security platforms and cloud services via APIs.
  • Data Handling: Experience with various data formats (CSV, JSON, XML, log files) and techniques for data cleaning, transformation, and normalization.
• Analytical Skills: Demonstrated ability to perform statistical analysis, identify trends, and derive meaningful insights from large, complex datasets.
• Data Visualization Tools: Proficiency with at least one leading data visualization tool (e.g., Power BI).
• Experience with cloud platforms (Azure) and their data services.

Preferred Qualifications

• Experience working in global or cross‑functional environments.
• Familiarity with regulatory and compliance reporting (e.g., SOX, GDPR, CMMC).
• Certifications such as CISSP, CISM, CRISC, or CISA.

Total Rewards

The salary range for this position is $69,000 - $114,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people‑first organization.

Job Segment: Cyber Security, Statistics, Data Analyst, Developer, Compliance, Security, Data, Technology, Legal

Accessibility Statement: We encourage you to connect with us at [e-mail] if you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations) or [e-mail] for any questions relating to careers for Indigenous peoples at Deloitte (First Nations, Inuit, Métis).

By applying to this job you will be assessed against the Deloitte Global Talent Standards. We’ve designed these standards to provide our clients with a consistent and exceptional Deloitte experience globally.

Deloitte Canada has 20 offices with representation across most of the country. We acknowledge that Deloitte offices stand on traditional, treaty, and unceded territories in what is now known as Canada. We recognize that Indigenous Peoples have been the caretakers of this land since time immemorial, nurturing its resources and preserving its natural beauty. We acknowledge this land is still home to many First Nations, Inuit, and Métis Peoples, who continue to maintain their deep connection to the land and its sacred teachings. We humbly acknowledge that we are all Treaty people, and we commit to fostering a relationship of respect, collaboration, and stewardship with Indigenous communities in our shared goal of reconciliation and environmental sustainability.