Senior Consultant/Manager Cyber Operate Cyber Performance Management Specialist

About Deloitte

Deloitte is a global professional services firm recognized for its impact on clients, people, and society. The firm provides innovative insights, solves complex challenges, and supports sustainable growth. Deloitte fosters an inclusive and collaborative culture, inspiring professionals to deliver value to clients.

The Role: Senior Consultant/Manager Cyber Operate Cyber Performance Management Specialist

Deloitte is seeking a Senior Consultant/Manager Cyber Operate Cyber Performance Management Specialist for a contract position in Riyadh. This role requires 5-10 years of experience and focuses on designing and implementing cybersecurity performance management frameworks, defining success metrics, and building reporting mechanisms to drive continuous improvement.

Key Responsibilities

• Design the cybersecurity performance management framework, including objectives, KPIs, KRIs, SLAs, targets, data sources, and reporting lines.
• Develop and maintain methodologies, procedures, and SOPs for data collection, validation, calculation, review, and sign-off.
• Align metrics with cybersecurity strategy, NCA ECC requirements, and NIST CSF to measure outcomes and risk reduction.
• Define clear success metrics for each cybersecurity function and role, ensuring agreement with domain leads.
• Establish how each metric is measured, including formula, data source, baseline, target, frequency, owner, and evidence.
• Set measures at programme, function, and role levels, linking them to demonstrate overall programme results.
• Collaborate with the Governance & PMO team to integrate governance requirements into measurable indicators.
• Track the implementation of governance decisions and report gaps to the Governance team and steering committee.
• Provide performance evidence for ISMS management reviews and NCA compliance reporting.
• Monitor service levels and performance of managed security services and key security vendors.
• Track programme delivery and benefits against plan in coordination with the PMO.
• Measure cybersecurity maturity and NCA compliance trends over time with Strategy and Compliance teams.
• Build and maintain dashboards and scorecards for the CISO, steering committee, and board (*, Power BI).
• Automate data collection from security tools, GRC, TPRM, and ticketing platforms where feasible.
• Produce monthly and quarterly performance reports that explain changes, root causes, and necessary actions.
• Identify negative trends and missed targets, analyze root causes, and agree on improvement actions with owners.
• Track improvement actions to closure and demonstrate their effect in subsequent reporting.
• Validate data quality and challenge figures that are inconsistent.

Leadership Capabilities

• Develop an understanding of Deloitte's purpose and values, seeking opportunities for impact.
• Demonstrate commitment to personal learning and development, acting as a brand ambassador.
• Understand expectations and maintain personal accountability for performance.
• Actively develop effective communication and relationship-building skills.
• Understand how daily work contributes to team and business priorities.

Experience and Work Type

Candidates should possess 5-10 years of relevant experience. This is a contract position based in Riyadh.

Application Process

Join Deloitte to make an impact that matters and contribute to a leading professional services firm.