ISSM Senior Consultant, Strategy, Growth, and Transformation

Deloitte•Arlington, VA

56d•$124,700 - $207,800•Onsite

About The Position

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Senior Consultant, Strategy, Growth, and Transformation on the Cyber & Strategic Risk team, you will be responsible for leading and overseeing RMF execution across assigned systems, programs, or enclaves. You will direct Authority to Operate (ATO) activities and ensure required documentation is complete, current, and audit-ready. You will also manage, coach, and mentor ISSOs and other security support staff, oversee vulnerability management, risk assessments, POA&M tracking, and remediation prioritization. Additionally, you will develop, implement, and enforce security policies, procedures, and training requirements, and coordinate with Authorizing Officials, system owners, CISO staff, engineers, and program leadership to assess and communicate system risk posture. Ensure compliance with applicable security frameworks and federal requirements, including NIST RMF, NIST SP 800-53, and related DoD cybersecurity guidance.

Requirements

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to mentor and provide clear guidance to others
Bachelor’s degree
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
Active Secret security clearance required
Ability to travel 25%, on average, based on the work you do and the clients and industries/sectors you serve
Must be local to the DMV Area with the ability to come on site 5 days a week.
5+ Years of the following experience: Cybersecurity or information assurance experience.
5+ Years of the following experience: NIST SP 800-53, RMF processes, and ATO lifecycle activities.
5+ Years of the following experience: Experience leading security governance, compliance, and risk management efforts.
5+ Years of the following experience: Vulnerability scanning tools, STIG validation, POA&M governance, and security documentation workflows.

Nice To Haves

Prior team leadership or security oversight experience preferred. supervising ISSOs or coordinating security activities across multiple technical teams.
DoD 8140 certifications such as CISSP strongly preferred.
Ability to operate in fast-paced, compliance-driven environments.
Strong judgment in evaluating cyber risk and balancing mission needs.
Proven ability to build trust with technical teams and senior leadership.
Detail-oriented approach to documentation, authorization, and continuous monitoring requirements.

Responsibilities

Lead and oversee RMF execution across assigned systems, programs, or enclaves.
Direct Authority to Operate (ATO) activities and ensure required documentation is complete, current, and audit-ready.
Manage, coach, and mentor ISSOs and other security support staff.
Oversee vulnerability management, risk assessments, POA&M tracking, and remediation prioritization.
Develop, implement, and enforce security policies, procedures, and training requirements.
Coordinate with Authorizing Officials, system owners, CISO staff, engineers, and program leadership to assess and communicate system risk posture.
Ensure compliance with applicable security frameworks and federal requirements, including NIST RMF, NIST SP 800-53, and related DoD cybersecurity guidance.