Manager, Secure Design, Global

Deloitte (UK); Alabama; Híbrido; USD 94 000 - 120 000; Tempo integral

Resumo da oferta

Deloitte Technology in Belfast is seeking a Senior Secure Design Lead to drive the delivery and continuous improvement of SSDLC processes across enterprise platforms. You will guide security reviews, collaborate with senior stakeholders, and shape AI-enabled security initiatives within the lifecycle of technology programs.

The role requires extensive experience in secure design, governance, and cloud architectures, with a hybrid working setup based in Belfast.

Qualificações

• Proven experience leading SSDLC, secure design and related governance.
• Experience managing multiple reviews and workstreams from planning to delivery.
• Strong knowledge of cybersecurity principles and secure-by-design practices.
• Knowledge of cloud, SaaS, enterprise platforms, and DevOps/DevSecOps.
• AI security governance knowledge.
• Excellent stakeholder management and communication skills.
• People leadership and coaching experience.

Responsabilidades

• Lead Secure Design oversight for a portfolio of strategic platforms and vendor solutions.
• Own the quality and timely delivery of cybersecurity design reviews and assessments.
• Apply risk-based judgement and document risks and remediation steps.
• Provide guidance on secure design principles and SSDLC requirements.
• Manage competing priorities and allocate team capacity.
• Set objectives and provide feedback to team members.
• Coach colleagues and connect team with wider Deloitte networks.
• Build trusted relationships with senior stakeholders and translate cyber strategy into delivery actions.
• Lead improvements to Secure Design processes and governance.
• Oversee AI programme development and governance within SSDLC.

Conhecimentos

SSDLC leadership

Multi-project governance

Cybersecurity principles

Cloud & DevOps

AI security governance

Stakeholder management

People leadership

Formação académica

Cybersecurity degree or equivalent

Cybersecurity certification (CISSP/CCSP)

Enterprise vendor knowledge

Cloud platforms knowledge

Ferramentas

SAP

Salesforce

Microsoft Azure

AWS

Google Cloud

ServiceNow

Descrição da oferta de emprego

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Connect to your career at Deloitte

Deloitte drives progress. Using our vast range of expertise, we help our clients' become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.

What brings us all together at Deloitte?It’show we approach the thousands of decisions we make everyday. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, whereverwe arein the world, welead the way,serve with integrity, take care of each other ,fosterinclusion, andcollaborate for measurable impact. These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost .

Connect to your opportunity

As part of the Secure Design team, you will lead the delivery and continuous improvement of Deloitte's Secure System Development Life Cycle (SSDLC) processes, supporting Deloitte Global’s corporate and business support functions and ensuring cybersecurity requirements are embedded throughout the lifecycle of business applications, platforms and technology initiatives. You will manage a portfolio of secure design reviews, provide direction to team members, influence senior business and technology stakeholders, and help advance innovative AI-enabled capabilities that improve the quality, consistency and efficiency of Secure Design services.

Key responsibilities include:

SSDLC Operations & Delivery

• Lead Secure Design oversight for a portfolio of strategic enterprise platforms and vendor solutions, building trusted relationships with platform leadership teams and integrating security review activities into product roadmaps, delivery pipelines and release governance.
• Own the quality and timely delivery of cybersecurity design reviews and security assessments, ensuring solutions meet applicable cybersecurity standards, policies and control requirements.
• Apply risk-based judgement to complex design decisions, clearly articulate security risks and recommendations, and ensure actions, exceptions and remediation activities progress through the appropriate governance processes.
• Provide authoritative guidance on secure design principles and SSDLC requirements, helping delivery teams embed proportionate security requirements early and throughout the technology lifecycle.
• Manage competing priorities across multiple reviews and deploy team capacity effectively to maintain high-quality outcomes and stakeholder value.

People Leadership & Capability Development

• Set clear objectives, roles and quality expectations for team members, reviewing progress and providing timely, constructive feedback.
• Coach and develop colleagues through knowledge sharing and practical guidance that build current and future capability.
• Connect team members with specialists and wider networks across Deloitte to strengthen delivery quality and broaden technical expertise.

Stakeholder Engagement

• Build trusted relationships with senior business, technology, architecture and cybersecurity stakeholders across Enabling Areas and the wider Deloitte network, acting as the senior point of contact for Secure Design and SSDLC matters and translating cyber strategy into practical actions for delivery teams.
• Influence and align diverse stakeholders on scope, priorities, risk treatment and decisions, leading difficult conversations constructively and adapting your approach to stakeholder needs and organisational sensitivities.
• Communicate complex technical and security issues through concise, business-relevant narratives that support informed decision making.
• Lead improvements to Secure Design processes, controls and ways of working, championing leading practices and challenging existing approaches where change will improve outcomes.
• Build stakeholder buy-in for new ways of working, managing ambiguity and helping the team adapt with resilience during periods of change.
• Oversee the development and maintenance of process documentation, standards, guidance, training materials and operating procedures.
• Provide leadership to the Secure Design AI programme by identifying and prioritising opportunities to use AI to improve cyber review processes, decision support and team productivity.
• Oversee the governance and security assessment of AI-enabled solutions within SSDLC processes, ensuring alignment with cybersecurity, privacy, data security, quality and risk management requirements.
• Monitor relevant technology trends, assess their practical implications, and translate insights into recommendations for Secure Design strategy and service improvement.
• Promote ethical and responsible use of technology, ensuring automation supports sound professional judgement and protects Deloitte and stakeholder trust.

Connect to your skills and professional experience

Qualifications

• Proven experience leading SSDLC, secure design, application security, cybersecurity architecture, technology risk or related governance activities.
• Demonstrated experience managing multiple reviews, initiatives or workstreams from planning through delivery, including prioritisation, resource coordination, governance and escalation.
• Strong understanding of cybersecurity principles, secure-by-design practices, risk management, application security and modern technology architectures.
• Knowledge of cloud platforms, SaaS, enterprise platforms, modern application architectures, Agile delivery and DevOps or DevSecOps practices.
• Knowledge of AI technologies, associated security and governance considerations, and their practical application within cybersecurity and business processes.
• Excellent stakeholder management, influencing, facilitation and communication skills, including the ability to engage confidently with senior technical and non-technical stakeholders.
• People leadership experience, including setting expectations, coaching colleagues, providing feedback and creating an inclusive, high-performing team environment.

Preferred:

• Degree or equivalent in cybersecurity, computer science, information technology or an equivalent discipline.
• Relevant cybersecurity professional qualification such as CISSP, CCSP, or equivalent.
• Deep knowledge and practical experience of major enterprise technology vendors and platforms, such as SAP and Salesforce, and the security considerations associated with their architecture, configuration, integration and lifecycle management.
• Experience of cloud and enterprise platforms such as Microsoft Azure, AWS, Google Cloud, Salesforce, or ServiceNow.

Connect to your business - Enabling Functions

Collaboration is central to everything we do at Deloitte. From IT to HR, marketing and more, our teams help to support the wider business in everything they do. Bringing your individual skills and specialist knowledge, you can make a far-reaching impact. Come join us.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment team will provide further detail as you progress through the recruitment process or you can contact the Independence team upon request.

Connect with your colleagues

"Everyone at Deloitte builds relationships with their peers and puts in effort to get to know one another, making the work more enjoyable." – Deloitte Employee

Our hybrid working policy

You’ll be based in Belfast with hybrid working.

At Deloitte we understand the importance of balancing your career alongside your home life. That’s why we’ll support you to work flexibly through our hybrid working policy. Depending on the requirements of your role, you’ll have the opportunity to work in your local office, virtual collaboration spaces, client sites and remotely. You’ll get the chance to meet face to face when needed, while you collaborate and learn from colleagues, share your experiences, and build the relationships that will fuel your career and prioritise your wellbeing. Please check with your recruiter for the specific working requirements that may apply for your role.

Our commitment to you

Making an impact is more than just what we do: it’s why we’re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.

We want you. The true you. Your own strengths, perspective and personality. So we’re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we’ll take your wellbeing seriously, too. Because it’s only when you’re comfortable and at your best that you can make the kind of impact you, and we, live for.

Your expertise is our capability, so we’ll make sure it never stops growing. Whether it’s from the complex work you do, or the people you collaborate with, you’ll learn every day. Through world-class development, you’ll gain invaluable technical and personal skills. Whatever your level, you’ll learn how to lead.

Connect to your next step

A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you’ll experience a purpose you can believe in and an impact you can see. You’ll be free to bring your true self to work every day. And you’ll never stop growing, whatever your level.

Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk/careers