Deloitte Technology Cybersecurity – Assistant Manager, Security Inquiry Response Centre (SIRC)

Deloitte LLP; United Kingdom; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading professional services firm is seeking a Senior Analyst in cybersecurity to address client inquiries and manage regulatory requests. The role requires a Bachelor's degree in business or technology and relevant experience in Information Security. The analyst will contribute to the development of best practices and support audit requests, ensuring high-quality deliverables.

Qualifications

• Bachelor’s degree in business administration or a technology-related field.
• Relevant experience in large-scale Information Security practices.
• Basic knowledge in IT auditing and risk management.

Responsibilities

• Address client security inquiries and regulatory requests.
• Plan and assign tasks for team members.
• Analyze security requests and coordinate audit requests.

Skills

Analytical skills

Problem-solving skills

Knowledge of IT risk frameworks

Collaboration skills

Education

Bachelor’s Degree or higher in business administration or technology-related field

Tools

ServiceNow

Job description

Overview

As a SIRC Senior Analyst within Deloitte Technology’s Cybersecurity, Governance, Risk and Compliance team, you will play a pivotal role in addressing client security inquiries for our member firms, clients and regulators.

Responsibilities

• Address member firm, client, regulatory and audit‑related information security requests.
• Identify, gather and pre‑populate responses using Standard Answer Banks (SABs).
• Determine remaining questions needing consultation with Management, Client Security Leads (CSLs) or Subject Matter Experts (SMEs).
• Ensure the quality and consistency of work performed by other team members.
• Assign and plan tasks for other team members.
• Highlight and address issues in SABs and assist with their maintenance, improving quality of responses and expanding scope as necessary.
• Support service queue and mailbox rotation for consistent coverage.
• Analyze and evaluate security requests, internal/external assessments, and audits.
• Coordinate internal/external audit requests, including scoping, data gathering and refinement.
• Assist with evidence gathering and sanitization activities.
• Build strong relationships with internal stakeholders and maintain regular communication with the management team, member firm CSLs and various SMEs to improve deliverable quality.
• Contribute to the development of best practices and stay up to date on global security policies, standards and technology.

Qualifications

• Bachelor’s Degree or higher in business administration (or equivalent), a technology‑related field, or equivalent experience.
• Relevant demonstrated experience in applying leading practices in a large‑scale Information Security.
• Basic knowledge of Information Systems Security, cyber security, IT auditing, IT risk management and compliance and/or vendor security risk management.
• Working knowledge of various IT risk frameworks, methodologies, leading industry/assurance standards and regulations, as well as attestation reporting frameworks, such as the ISO family of standards (27001/2, ISO 22301, ISO 27017, etc.), NIST, COBIT, SOC2 reporting framework.
• Basic knowledge of GRC tools (e.g., ServiceNow).
• Strong analytical and problem‑solving skills.