GRC/IRM —Archer Lead Solution Advisor

Deloitte’s Cyber Risk Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Deloitte’s Cyber Risk Services have been recognized as a leader by a number of independent analyst firms.

IDC MarketScape named Deloitte as a Leader in the first 2024 for Worldwide Cybersecurity Consulting Services: Global System Integrators/Consultancies. Source: Worldwide Systems Integrators/Consultancies for Cybersecurity Consulting Services 2024 Vendor Assessment, By Cathy Huang, Published January 2024 – ID#US50463423

Work you will do

As a Senior Consultant in Governance, Risk, and Compliance (GRC[SK1] [GA2] [SK3] )/ Integrated Risk Management (IRM) at Deloitte, you will play a pivotal role and be instrumental in helping our clients manage and mitigate risks associated with their governance, risk management, and compliance activities by focusing on delivering continuous, high-quality GRC services to our clients. This role involves a blend of strategic advisory, process improvement, and technology implementation, tailored to ensure continuous compliance and effective risk management strategies are in place.

This role also involves ensuring compliance with regulatory requirements and managing risks effectively. The ideal candidate will have a strong background in GRC frameworks, excellent analytical skills and adept in developing workflows in Archer.

As a Senior Consultant, you would be expected to perform the following activities:

·       Lead and manage Archer implementation projects from inception to completion, ensuring timely delivery and adherence to project scope, budget, and quality standards.

·       Hands-on experience in application developments, ODAs, DDEs, UI, Reports and Dashboards, Advanced Workflows, Data Feeds, Mail Merge and other administrative activities

·       Good understanding of configuring advanced Data Feeds (like JavaScript Transporter, HTTPS, DB Query) with custom XSLTs and transforming data within a data feed.

·       Hands-on experience in integrating other third-party tools and technologies using programming languages and scripts like JavaScript/Shell/HTML5/CSS

·       Understanding of GRC technology and implementation approaches including several of the various modules available

·       Utilize deep technical expertise to develop solutions that may involve substantial changes to system architecture.

·       Conduct root cause analysis to identify and resolve complex problems impacting the platform infrastructure and propose areas of improvement to the leadership

·       Provide subject matter expertise on IRM solution and industry best practices

·       Administrative knowledge of Archer Control Panel, Windows/Database Server

·       Excellent documentation and presentation, verbal and written communication skills and ability to work with teams across geographical locations.

·       Creates business and technical design specifications for implementation/maintenance of the Archer Platform

·       Develop and deliver presentations and reports to clients and senior management

·       Assist in day-to-day Archer sales and practice development efforts

·       Excellent verbal and written communication skills. Ability to convey technical information to non-technical stakeholders.

·       Strong analytical and problem-solving skills with attention to detail and a strategic mindset.

·       Understanding of variety of systems and applications including Windows Server, SQL Server

·       Support proposal development, client presentations, and other business development activities

·       Knowledge of industry standards and frameworks such as ISO 27001, NIST, COBIT, and GDPR.

·       Flexible to work on client specific time zone.

The team

Want to work at one of the fastest growing and industry leading risk management consulting firms that will give you an enriching experience to build your career and brand? If yes, then look no further, Deloitte’s Cyber Risk Services practice is the place for you. The Cyber Governance, Risk, and Compliance (GRC)/ Integrated Risk Management (IRM) is one of the most rapidly growing market offerings with capability spanning - GRC strategy, design, and implementation of GRC & Security solutions using confluence of Archer, ServiceNow, Aravo and OneTrust.

Individuals who take deep personal accountability for their work, have a passion for excellence, driven to achieve their full potential and understand the value of building relationships with clients and the industry, are encouraged to realize our requirement for GRC. The GRC Solution Advisor is expected to have an in- depth understanding of GRC tools as mentioned above, leading practices and have demonstrated experience in the design and implementation of their solutions. Understanding of risk and compliance pain points and how they can be addressed effectively through a scalable and usable GRC technology is key to success in this role. This role involves working closely with clients to understand their needs, designing solutions that leverage all the tool’s capabilities to enhance their GRC processes, and ensuring the successful implementation and operation of these solutions.

Required:

Education:

·       Bachelor’s degree in Computer Science/ Information Technology, or a related field.

Experience:

·       Minimum of 5-7 years of experience in implementing GRC solutions in Archer.

·       Gathering and documenting business requirements and identifying gaps within existing systems and processes.

·       Subject matter expertise in IRM solution and industry best practices

·       Hands-on experience on at least 3 - 4 GRC modules (ERM, ITRM, TPRM, SecOps, Issues Management, Policy & Compliance Management, etc.).

·       Hands-on experience in on-demand and out-of-the-box solution developments, access control, rules & events, notifications, data integrations, UI, reports and dashboards, workflows and other administrative activities in Archer

·       Proficient in risk management processes and compliance regulations.

·       Proven experience in GRC, particularly within a consulting environment.

·       Proficiency with scripting language in implementing API integrations with external system

·       Must have development experience in more than 4-5 projects from scratch to till go-live

·       Strong understanding of GRC frameworks such as COBIT, ISO 27001, NIST, etc.

·       Strong analytical and problem-solving skills.

·       Excellent verbal and written communication skills. Ability to convey technical information to non-technical stakeholders.

·       Flexibility in work hours may be necessary to meet project deadlines and client needs.

Preferred:

·       Education: Master’s degree in Business Administration, Cyber Security or a related field

·       GRC Certifications: Archer Expert Certification

·       Knowledge on Network and Infrastructure management

·       Experience with other GRC (Governance, Risk, and Compliance) platforms.