Consultant Manager Cyber Operate Strategy & Architecture

About Deloitte

Deloitte is one of the largest professional services firms globally, recognized for its impact on clients, people, and society. The firm has received awards such as Best Employer in the Middle East and Best Consulting Firm. Deloitte's operations are guided by shared values including leading the way, serving with integrity, taking care of each other, fostering inclusion, and collaborating for measurable impact.

The Role: Consultant Manager Cyber Operate Strategy & Architecture

Deloitte is seeking a Consultant Manager for Cyber Operate Strategy & Architecture in Riyadh, Riyadh. This full-time role involves developing and demonstrating capabilities across various cybersecurity strategy and architecture domains. The position requires 5-10 years of relevant experience.

Key Responsibilities

• Assess current cybersecurity posture and maturity against standards such as NCA ECC-2:2024, NIST CSF , and ISO/IEC 27001:2022, and produce assessment reports.
• Define target states, visions, and guiding principles, translating ambiguity into clear options and recommended paths, and author cybersecurity strategies.
• Benchmark against peer organizations, regulated KSA entities, and global leading practices.
• Design and document target operating models, including structure, roles, RACI, capability maps, and the split between in-house, managed-service, and outsourced work.
• Define interfaces between cybersecurity, IT, OT, risk, legal, procurement, and business functions.
• Build 3–5 year roadmaps of costed initiatives, prioritized by risk reduction, regulatory need, and cost, ensuring realism for organizational delivery.
• Prepare business cases, investment profiles, and annual budget inputs, linking security spend to business value and risk reduction.
• Track roadmap delivery and benefits, re-prioritizing as development plans change.
• Advise CISOs, steering committees, and executives, managing challenges and push-back, and running strategy workshops.
• Define strategic KPIs and KRIs with the Performance Management team.
• Produce quarterly strategy and roadmap progress reports and board-level papers.

Leadership Capabilities

• Builds understanding of Deloitte's purpose and values, exploring opportunities for impact.
• Demonstrates commitment to personal learning and development, acting as a brand ambassador.
• Understands expectations and shows personal accountability for performance.
• Focuses on developing effective communication and relationship-building skills.
• Understands how daily work contributes to team and business priorities.

Qualifications and Experience

• 5-10 years of experience in a relevant field.
• Demonstrated ability to assess cybersecurity posture and maturity against industry standards.
• Experience in designing and documenting target operating models.
• Proficiency in building strategic roadmaps and business cases for cybersecurity initiatives.
• Ability to advise senior leadership and prepare professional reports.

Work Environment

This is a full-time position based in Riyadh, Riyadh, offering an environment that fosters professional growth and collaborative culture within a global professional services firm.