Associate Director Cyber Engineering - Data Protection

Deloitte • Dayton, OH

20h • $130,900 - $268,700

About The Position

Deloitte Technology US is hiring a strategic Cyber Engineering Associate Director for its US Cyber Data Protection team. The team protects confidential data belonging to Deloitte US, its clients, and employees by implementing consistent cybersecurity controls. This senior leader is the team’s final technical escalation point and strategic owner for a portfolio of complex cybersecurity technology services, with responsibility for delivery, adoption, ongoing support, and long-term Zero Trust and data protection strategy. The services include Zero Trust Network Access (ZTNA) Proxy, Web Application Firewall (WAF), FSI Enhanced Controls Adoption, Data Classification & Rights Management (DCRM), and Key and Certificate Management. The role will also help lead emerging services and new Zero Trust initiatives as the portfolio grows.

The Associate Director directly leads nine Deloitte US and USI professionals, oversees the wider US Cyber Data Protection team, and works across the US Member Firm, serving more than 181,000 professionals. The role calls for executive-level reporting, escalation management, sound technical judgment, and communication of technical solutions to business leaders, the CIO Leadership Team, confidentiality and privacy stakeholders, BISOs, FSI practice leaders, PPMDs, and executives. The position reports to the US Cyber Engineering Director, Data Protection.

Responsibilities include setting strategy and vision for Cyber Data Protection and Zero Trust; owning service roadmaps, adoption, health, risk posture, metrics, and stakeholder satisfaction; leading ZTNA and WAF implementations and migrations; overseeing data protection, encryption, certificate, and key management services; and providing technical escalation leadership and continuous improvement. The Associate Director also leads cross-functional initiatives, develops stakeholder relationships, and recruits, coaches, and develops the team.

The role is based in one of 32 listed US locations and requires an average of 10% travel. The disclosed salary range is $130,900–$268,700, with possible eligibility for a discretionary annual incentive program. The recruiting period ends December 7, 2026.

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
• At least 10 years of relevant combined experience in IT or cybersecurity.
• At least 4 years of combined experience as a Technical Lead or Manager leading large cyber technology initiatives and/or directly managing cyber team members.
• Ability to travel an average of 10%, based on work and the clients and industries served.
• Must be legally authorized to work in the United States without employer sponsorship now or in the future.
• Experience with the majority of the listed cyber data protection and application security technologies, including ZTNA proxy platforms, WAF platforms, DLP platforms, data classification and rights management technologies, certificate lifecycle management, PKI, encryption key management, cloud-native security services in AWS/Azure/GCP, and secure protocols such as TLS, SSH, SFTP, 802.1x, and IPSEC.
• Ability to work independently and collaboratively.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to mentor others and provide clear guidance.

Nice To Haves

• Proven ability to lead and develop Cyber Engineers and Cyber Analysts, including recruiting, performance management, and succession planning.
• Track record leading multiple large, complex, high-visibility cybersecurity technology initiatives and workstreams.
• Comfort with executive-level reporting, issue escalation, and communication with CISO, Cyber Leaders, business stakeholders, Firm Directors, and client-facing PPMDs.
• Experience managing budgets, vendors, and strategic technology partnerships.
• Master’s degree in a relevant field.
• Professional security certifications such as CISSP, CISM, or SANS/GIAC.
• Experience leading Zero Trust strategy, design, and adoption across a large enterprise.
• Experience supporting the Financial Services Industry.
• Experience adopting, operating, and supporting enterprise-grade ZTNA Proxy, WAF, and DLP/DCRM platforms.
• Experience working across multi-cloud environments and multiple WAF and ZTNA platforms.
• Expertise in PKI architecture, enterprise trust models, and certificate lifecycle automation.
• Experience supporting large-scale production environments with responsibility for change implementation, incident response, and threat mitigation.
• Experience establishing long-term strategy and vision and influencing without authority in a matrixed organization.
• Strong mentoring capability for managers and emerging technical leads.
• Awareness of regulatory, audit, and policy requirements (for example, ISO 27001) affecting data protection.
• Ability to work under pressure, resolve issues and escalations effectively, and keep a team motivated under intense workload.
• Ability to write technical reports and communicate technical content to business and executive audiences.
• Experience working in a virtual and globally distributed team.

Responsibilities

• Establish long-term Cyber Data Protection strategy, Zero Trust vision, strategic plans, and supporting programs, tools, and processes with Cyber Leaders.
• Align US Cyber with Technology and Cyber Leadership direction and lead Zero Trust initiatives and cross-functional programs across the US Member Firm.
• Own planning, budgeting, prioritization, and solution recommendations for the services in scope.
• Serve as Service Owner for ZTNA Proxy, WAF, FSI Enhanced Cyber Controls Adoption, DCRM, and Key and Certificate Management, owning roadmaps, adoption, service health, risk posture, operational metrics, and stakeholder satisfaction.
• Lead migration of internet-facing applications to modern cloud-delivered ZTNA platforms while maintaining secure and reliable access.
• Lead onboarding of internet-facing applications to multiple WAF providers across multi-cloud environments; implement and optimize WAF policies, tune them to minimize false positives, and transition policies from detection to prevention/block mode through analysis, tuning, testing, and stakeholder engagement.
• Lead day-to-day technical expertise and support for TLS/SSL certificate lifecycle management, encryption key management, data classification and rights management, code signing, and public key infrastructure.
• Lead deployment and management of client and service auto-labeling and certificate lifecycle management automation projects.
• Roll out, enhance, and support new and existing Cyber Data Protection and Engineering services.
• Act as Cyber Leader and final escalation point for technical challenges and issues across US Data Protection and Engineering services.
• Drive service support and continuous improvement by embedding automation, self-service, and clear service levels; ensure governance through runbooks, change and incident discipline, audit readiness, and clear engineering-to-operations handoffs.
• Build and manage senior stakeholder relationships across Cyber, confidentiality and privacy, Technology Leaders, BISOs, FSS Leaders, Global Leaders, and vendors.
• Provide executive-level reporting on progress, risks, and outcomes to Firm Directors and the CIO Leadership Team, communicating technical solutions in business terms.
• Lead cross-functional cyber initiatives involving multiple teams and 40–50 stakeholders, and spearhead technical efforts with Global Cyber teams and vendors.
• Advance protection of sensitive data across endpoints, cloud, SaaS, applications, collaboration platforms, and email using classification, rights management, DLP, encryption, certificates, and key management as integrated controls.
• Review service risks, incidents, and design decisions, and provide architectural guidance on web application security, Zero Trust, data classification, and key and certificate lifecycle management.
• Monitor emerging threats, encryption technologies, and AI-related data risks, and recommend tools, controls, and standards to strengthen security.
• Lead, coach, and develop nine direct reports; recruit and retain talent, mentor future leaders, improve staff productivity, and oversee development.
• Lead performance management, succession planning, and professional well-being, fostering inclusion, ownership, and continuous learning.

Benefits

• Possible eligibility for a discretionary annual incentive program, subject to program rules and individual and organizational performance.
• Broad range of employee benefits; specific benefits are not detailed in the posting.
• Opportunities for professional development, including on-the-job learning, leadership opportunities, mentorship, and formal development programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior