Senior Manager - Cyber Assurance

Company Description

At Deloitte, our Purpose is to make an impact that matters for our clients, our people, and society. This is the lens for which our global strategy is set. It unites Deloitte professionals across geographies, businesses, and skills. It makes us better at what we do and how we do it. It enables us to deliver on our promises to stakeholders, while creating the lasting impact we seek.

Harnessing the talent of 457 000+ people located across more than 150 countries and territories, our size and scale puts us in a unique position to help change the world for the better—by bringing together the services we provide, the societal investments we make, and the collaborations we advance through our ecosystems.

Deloitte offers career opportunities across Audit & Assurance (A&A), Tax & Legal (T&L) and our Consulting Services business, which is made up of Strategy, Risk & Transactions (SR&T) and Technology & Transformation (T&T).

Job Description

Deloitte South Africa is seeking an accomplished and forward‑thinking leader to grow our Cyber Assurance capability within the broader Technology Assurance portfolio. This role is ideal for a seasoned professional with extensive experience in cybersecurity governance, control assessments, cloud security assurance, and cyber maturity evaluation — coupled with a strong track record of building teams, driving market growth, and leading complex assurance engagements.

You will play a pivotal role in shaping Deloitte’s Cyber Assurance practice, strengthening market presence, and supporting organisations in building trust and confidence in their cyber control environments.

Market Leadership & Growth

• Drive business development efforts to expand Deloitte’s Cyber Assurance practice across South Africa, with support to the Africa Member Firm when needed.
• Originate and convert new opportunities focused on cyber governance, control assurance, cloud security assurance, vulnerability management assurance, and ISO 27001 reviews.
• Build and sustain strong relationships with C‑suite executives, cybersecurity leaders, audit committees, and boards.
• Represent Deloitte as a thought leader on cybersecurity governance, assurance, and risk management.
• Contribute to thought leadership, go‑to‑market strategies, and industry engagements focused on strengthening organisational cyber resilience through assurance-driven insights.

Service Delivery & Innovation

• Lead and manage complex Cyber Assurance engagements, including:
  • Cybersecurity controls assurance (IT general controls, cybersecurity controls testing).
  • Security governance and operating model assessments.
  • Cloud security assurance across Azure, AWS, and GCP environments.
  • Vulnerability management assurance and cyber maturity assessments.
  • Identity and access management assurance.
  • ISO 27001 control reviews and readiness assessments.
• Ensure all work adheres to leading industry frameworks and standards, including:
  • ISO/IEC 27001
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • Zero Trust principles
  • Cloud security standards across major hyperscalers
  • COBIT
• Drive high‑quality, risk-based, value-driven outcomes that enhance clients’ cybersecurity posture and control maturity.
• Leverage emerging tools and methodologies to continuously improve assurance delivery.
• Note:  This role is separate from operational cybersecurity services (e.g., tool configuration, pentesting, SOC operations, incident response)

Team Leadership & Development

• Build, grow, and lead a high-performing Cyber Assurance team, scaling from a lean foundation to a robust capability.
• Mentor and develop practitioners at all levels, fostering a culture of excellence, collaboration, inclusion, and continuous skills development.
• Provide technical guidance on cybersecurity frameworks, assurance methodologies, cloud security concepts, and ISO requirements.
• Collaborate with regional and global Deloitte teams to bring leading practices, accelerators, and methodologies to the Africa market.

Qualifications

• 12+ years of experience in cybersecurity assurance, technology risk, IT audit, or related governance roles.
• Proven experience leading complex cyber assurance or cyber governance engagements within a professional services or consulting environment.
• Strong understanding of cybersecurity frameworks and leading practices, including:
  • ISO/IEC 27001
  • NIST CSF
  • CIS Controls
  • Zero Trust architectures
  • Cloud security best practices across Azure, AWS, and GCP
  • COBIT
• Hands‑on familiarity with cybersecurity concepts and cloud environments (for contextual understanding; not implementation-focused).
• Demonstrated success in business development and senior client relationship management.
• Professional certifications such as CISA, CISSP, CISM, CRISC, CCSP, ISO 27001 Lead Auditor/Implementer, or cloud security certifications are highly advantageous.
• Experience in a Big 4 or similar professional services environment is preferred.
• Strong leadership, communication, and stakeholder management skills.

Additional Information

Leadership Capabilities

• Living our Purpose - Acts as a role model, embracing and living our purpose and values, and recognizing others for the impact they make.
• Talent development - Develops high-performing people and teams through challenging and meaningful opportunities.
• Performance drive - Delivers exceptional client service; maximizes results and drives high performance from people while fostering collaboration across businesses and borders.
• Influence - Influences clients, teams, and individuals positively, leading by example and establishing confident relationships with increasingly senior people.
• Strategic direction - Understands key objectives for clients and Deloitte, aligns people to objectives and sets priorities and direction.

Note: The list of tasks / duties and responsibilities contained in this document is not necessarily exhaustive.  Deloitte may ask the employee to carry out additional duties or responsibilities, which may fall reasonably within the ambit of the role profile, depending on operational requirements.

Be careful of Recruitment Scams: Fraudsters or employment scammers often pose as legitimate recruiters, employers, recruitment consultants or job placement firms, advertising false job opportunities through email, text messages and WhatsApp messages. They aim to cheat jobseekers out of money or to steal personal information.

To help you look out for potential recruitment scams, here are some Red Flags:

• Upfront Payment Requests: Deloitte will never ask for any upfront payment for background checks, job training, or supplies.
• Requests for Personal Information: Be wary if you are asked for sensitive personal information, especially early in the recruitment process and without a clear need for it. Fraudulent links or contractual documents may require the provision of sensitive personal data or copy documents (e.g., government issued numbers or identity documents, passports or passport numbers, bank account statements or numbers, parent’s data) that may be used for identity fraud. Do not provide or send any of these documents or data. Please note we will never ask for photographs at any stage of the recruitment process.
• Unprofessional Communication: Scammers may communicate in an unprofessional manner. Their messages may be filled with poor grammar and spelling errors. The look and feel may not be consistent with the Deloitte corporate brand.

If you're unsure, make direct contact with Deloitte using our official contact details. Be careful not to use any contact details provided in the suspicious job advertisement or email.

At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities.

We are committed to employment equity and building a diverse and inclusive workplace across the African continent. Our recruitment processes are aligned with our Employment Equity Plan and the principles of the Employment Equity Act. Preference may be given to candidates from designated groups.

We actively support the inclusion of people with disabilities and embrace neurodiversity in the workplace. We recognise and value the unique strengths that neurodivergent individuals bring, and we are committed to creating an environment where everyone can thrive.

If you require reasonable accommodations in relation to your disability and neurodiverse needs during the recruitment process, please let us know. We are happy to make adjustments to suit your individual needs.

View all current vacancies at Deloitte →

1. Read the full job description and requirements on this page carefully before applying — tailor your application to what the employer actually asks for.
2. Update your CV and save it as a PDF. Make sure your contact details, most recent experience and qualifications are easy to find.
3. Click the apply button on this page to complete your application on Deloitte's own careers site. The employer manages the shortlisting process directly.
4. Have certified copies of your ID and qualifications ready. Many South African employers request them once you are shortlisted.
5. Applications close on 19 August 2026. Submit well before the deadline — late applications are normally not considered.
6. Keep a record of what you submitted and when. If you have not heard back within a few weeks of the closing date, it is acceptable to follow up politely.

If Deloitte shortlists you for the Senior Manager - Cyber Assurance position, preparation makes the difference. Work through these steps:

• Research Deloitte before the interview — look for their official website, social profiles and any recent news. Interviewers expect you to know why you want to work there specifically.
• Go through the job description above and prepare a specific example from your own experience for each of the main duties. Most interview questions will be drawn from what the advert emphasises.
• Structure your answers with the STAR method — Situation, Task, Action, Result. Concrete stories with measurable outcomes are far stronger than general claims about your abilities.
• Prepare two or three thoughtful questions to ask the panel — about the team, how success is measured in the role, or growth opportunities. It signals genuine interest.
• Plan your logistics early. Confirm whether the interview is in person in Midrand or online, and arrive or log in at least ten minutes early.