Senior Manager - Cyber Assurance

ATS Client; Midrand; On-site; ZAR 1,800,000 - 3,000,000; Full time

Job summary

Deloitte South Africa is seeking an accomplished and forward‑thinking leader to grow our Cyber Assurance capability within the broader Technology Assurance portfolio.

This role is ideal for a seasoned professional with extensive experience in cybersecurity governance, control assessments, cloud security assurance, and cyber maturity evaluation – coupled with a strong track record of building teams, driving market growth, and leading complex assurance engagements.

Qualifications

• 12+ years of experience in cybersecurity assurance, technology risk, IT audit, or related governance roles.
• Proven leadership of complex cyber assurance or governance engagements in a professional services environment.
• Strong understanding of ISO 27001, NIST CSF, CIS Controls, Zero Trust, COBIT.

Responsibilities

• Lead and grow a Cyber Assurance team in South Africa; scale capability.
• Drive business development and originate opportunities in cyber governance and cloud security.
• Oversee governance, control testing, and maturity assessments across client engagements.
• Ensure adherence to industry frameworks (ISO 27001, NIST CSF, CIS Controls).
• Collaborate with regional/global Deloitte teams to share best practices.

Skills

Cybersecurity governance

Control assessments

Cloud security

ISO 27001

NIST CSF

Leadership

Education

Bachelor's degree in IT/IS

Tools

Azure

AWS

GCP

Job description

Company Description

At Deloitte, our Purpose is to make an impact that matters for our clients, our people, and society. This is the lens for which our global strategy is set. It unites Deloitte professionals across geographies, businesses, and skills. It makes us better at what we do and how we do it. It enables us to deliver on our promises to stakeholders, while creating the lasting impact we seek.

Harnessing the talent of 457 000+ people located across more than 150 countries and territories, our size and scale puts us in a unique position to help change the world for the better by bringing together the services we provide, the societal investments we make, and the collaborations we advance through our ecosystems.

Deloitte offers career opportunities across Audit & Assurance (A&A), Tax & Legal (T&L) and our Consulting Services business, which is made up of Strategy, Risk & Transactions (SR&T) and Technology & Transformation (T&T).

Job Description

Deloitte South Africa is seeking an accomplished and forward‑thinking leader to grow our Cyber Assurance capability within the broader Technology Assurance portfolio. This role is ideal for a seasoned professional with extensive experience in cybersecurity governance, control assessments, cloud security assurance, and cyber maturity evaluation – coupled with a strong track record of building teams, driving market growth, and leading complex assurance engagements.

Market Leadership & Growth

• Drive business development efforts to expand Deloitte's Cyber Assurance practice across South Africa, with support to the Africa Member Firm when needed.
• Originate and convert new opportunities focused on cyber governance, control assurance, cloud security assurance, vulnerability management assurance, and ISO 27001 reviews.
• Build and sustain strong relationships with C‑suite executives, cybersecurity leaders, audit committees, and boards.
• Represent Deloitte as a thought leader on cybersecurity governance, assurance, and risk management.
• Contribute to thought leadership, go‑to‑market strategies, and industry engagements focused on strengthening organisational cyber resilience through assurance‑driven insights.

Service Delivery & Innovation

• Lead and manage complex Cyber Assurance engagements, including:
  • Cybersecurity controls assurance (IT general controls, cybersecurity controls testing).
  • Security governance and operating model assessments.
  • Cloud security assurance across Azure, AWS, and GCP environments.
  • Vulnerability management assurance and cyber maturity assessments.
  • Identity and access management assurance.
  • ISO 27001 control reviews and readiness assessments.
• Ensure all work adheres to leading industry frameworks and standards, including:
  • ISO/IEC 27001
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • Zero Trust principles
  • Cloud security standards across major hyperscalers
  • COBIT
• Drive high‑quality, risk‑based, value‑driven outcomes that enhance clients' cybersecurity posture and control maturity.
• Leverage emerging tools and methodologies to continuously improve assurance delivery.
• Note: This role is separate from operational cybersecurity services (e.g., tool configuration, pentesting, SOC operations, incident response).

Team Leadership & Development

• Build, grow, and lead a high‑performing Cyber Assurance team, scaling from a lean foundation to a robust capability.
• Mentor and develop practitioners at all levels, fostering a culture of excellence, collaboration, inclusion, and continuous skills development.
• Provide technical guidance on cybersecurity frameworks, assurance methodologies, cloud security concepts, and ISO requirements.
• Collaborate with regional and global Deloitte teams to bring leading practices, accelerators, and methodologies to the Africa market.

Qualifications

• 12+ years of experience in cybersecurity assurance, technology risk, IT audit, or related governance roles.
• Proven experience leading complex cyber assurance or cyber governance engagements within a professional services or consulting environment.
• Strong understanding of cybersecurity frameworks and leading practices, including:
  • ISO/IEC 27001
  • NIST CSF
  • CIS Controls
  • Zero Trust architectures
  • Cloud security best practices across Azure, AWS, and GCP
  • COBIT
• Hands‑on familiarity with cybersecurity concepts and cloud environments (for contextual understanding; not implementation‑focused).
• Demonstrated success in business development and senior client relationship management.
• Professional certifications such as CISA, CISSP, CISM, CRISC, CCSP, ISO 27001 Lead Auditor/Implementer, or cloud security certifications are highly advantageous.
• Experience in a Big 4 or similar professional services environment is preferred.
• Strong leadership, communication, and stakeholder management skills.

Additional Information

Note: The list of tasks / duties and responsibilities contained in this document is not necessarily exhaustive. Deloitte may ask the employee to carry out additional duties or responsibilities, which may fall reasonably within the ambit of the role profile, depending on operational requirements.

Leadership Capabilities

• Living our Purpose – Acts as a role model, embracing and living our purpose and values, and recognizing others for the impact they make.
• Talent development – Develops high‑performing people and teams through challenging and meaningful opportunities.
• Performance drive – Delivers exceptional client service; maximises results and drives high performance from people while fostering collaboration across businesses and borders.
• Influence – Influences clients, teams, and individuals positively, leading by example and establishing confident relationships with increasingly senior people.
• Strategic direction – Understands key objectives for clients and Deloitte, aligns people to objectives and sets priorities and direction.

Be careful of Recruitment Scams

Fraudsters or employment scammers often pose as legitimate recruiters, employers, recruitment consultants or job placement firms, advertising false job opportunities through email, text messages and WhatsApp messages. They aim to cheat jobseekers out of money or to steal personal information.

Red Flags

• Upfront Payment Requests: Deloitte will never ask for any upfront payment for background checks, job training, or supplies.
• Requests for Personal Information: Be wary if you are asked for sensitive personal information, especially early in the recruitment process and without a clear need for it. Fraudulent links or contractual documents may require the provision of sensitive personal data or copy documents (e.g., government issued numbers or identity documents, passports or passport numbers, bank account statements or numbers, parent's data) that may be used for identity fraud. Do not provide or send any of these documents or data. Please note we will never ask for photographs at any stage of the recruitment process.
• Unprofessional Communication: Scammers may communicate in an unprofessional manner. Their messages may be filled with poor grammar and spelling errors. The look and feel may not be consistent with the Deloitte corporate brand.

If you’re unsure, make direct contact with Deloitte using our official contact details. Be careful not to use any contact details provided in the suspicious job advertisement or email.

At Deloitte, we want everyone to feel they can be themselves and to thrive at work in every country, in every thing we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities.

We are committed to employment equity and building a diverse and inclusive workplace across the African continent. Our recruitment processes are aligned with our Employment Equity Plan and the principles of the Employment Equity Act. Preference may be given to candidates from designated groups.

We actively support the inclusion of people with disabilities and embrace neurodiversity in the workplace. We recognise and value the unique strengths that neurodivergent individuals bring, and we are committed to creating an environment where everyone can thrive.

If you require reasonable accommodations in relation to your disability and neurodiverse needs during the recruitment process, please let us know. We are happy to make adjustments to suit your individual needs.