Secure Design Manager, Deloitte Global Technology

Role overview

SSDLC operations and delivery

• Oversee secure design for strategic enterprise platforms and vendor solutions, integrating reviews into roadmaps, delivery pipelines, and release governance.
• Own quality and timely delivery of design reviews and security assessments against applicable standards, policies, and controls.
• Apply risk-based judgment and progress security actions, exceptions, and remediation through governance.
• Guide teams in embedding proportionate security requirements throughout the technology lifecycle.
• Manage competing reviews and deploy team capacity to maintain quality and stakeholder value.

People leadership and engagement

• Set team objectives, roles, and quality expectations; review progress and provide constructive feedback.
• Coach colleagues, share knowledge, and connect team members with specialists to strengthen capability.
• Build trusted relationships with senior business, technology, architecture, and cybersecurity stakeholders.
• Align stakeholders on scope, priorities, risk treatment, and decisions, and communicate complex security issues in business-relevant terms.

Improvement and AI enablement

• Improve Secure Design processes, controls, and ways of working; build buy-in and help the team adapt to change.
• Oversee process documentation, standards, guidance, training materials, and operating procedures.
• Lead the Secure Design AI program by identifying and prioritizing opportunities to improve reviews, decision support, and productivity.
• Oversee security and governance assessment of AI-enabled solutions, considering cybersecurity, privacy, data security, quality, and risk.
• Monitor technology trends, recommend service improvements, and promote ethical, responsible technology use.

Required qualifications

• At least 5 years leading SSDLC, secure design, application security, cybersecurity architecture, technology risk, or related governance activities.
• Experience managing reviews, initiatives, or workstreams from planning through delivery, including prioritization, resources, governance, and escalation.
• Strong cybersecurity, secure-by-design, risk management, application security, and modern architecture knowledge.
• Knowledge of cloud platforms, SaaS, enterprise platforms, modern application architectures, Agile delivery, and DevOps or DevSecOps.
• Knowledge of AI technologies and their security, governance, and practical application.
• Strong stakeholder management, influencing, facilitation, and communication skills.
• People leadership experience, including setting expectations, coaching, and providing feedback.

Preferred qualifications

• Degree in cybersecurity, computer science, information technology, or an equivalent discipline.
• Relevant cybersecurity qualification such as CISSP, CCSP, or equivalent.
• Experience with enterprise platforms such as SAP and Salesforce and their security considerations.
• Experience with Azure, AWS, Google Cloud, Salesforce, or ServiceNow.

Compensation

• The stated salary range is $85,000 to $156,000, with possible eligibility for a bonus program; the salary cadence is not specified.

Workplace

• The job description identifies the work model as remote.