Analyst, Security Inquiry Response Center (SIRC) Job Details | Deloitte

Deloitte Global is the engine of the Deloitte network, delivering strategic programs and services that unite the organization. The Analyst in the Security Inquiry Response Center (SIRC) is responsible for preparing thorough and accurate responses to security-related inquiries, ensuring quality and consistency in team outputs, and maintaining strong relationships with internal stakeholders.

Responsibilities:

• Address member firm, client, regulatory, and audit-related information security requests
• Identify, gather, and pre-populate responses using Standard Answer Banks (SABs)
• Determine remaining questions needing consultation with Management, Client Security Leads (CSLs), or Subject Matter Experts (SMEs)
• Ensure the quality and consistency of work been done by other team members
• Highlight and address issues in SABs and assist with their maintenance, improving quality of responses and expanding scope as necessary
• Support service queue and mailbox rotation for consistent coverage
• Analyze and evaluate security requests, internal/external assessments, and audits
• Coordinate internal/external audit requests, including scoping, data gathering, and refinement
• Assist with evidence gathering and sanitization activities
• Build strong relationships with internal stakeholders and maintain regular communication with the management team, member firm CSLs and various SMEs to improve deliverable quality
• Contribute to the development of best practices and stay up to date on global security policies, standards and technology

Requirements:

• Bachelor's Degree or higher in business administration, a technology-related field, or equivalent experience
• Minimum of three (3) years demonstrated experience in applying leading practices in a large-scale Information Security
• Basic knowledge of Information Systems Security, cyber security, IT auditing, IT risk management and compliance and/or vendor security risk management
• Working knowledge of various IT risk frameworks, methodologies, leading industry/assurance standards and regulations, as well as attestation reporting frameworks, such as the ISO family of standards (2700x, ISO 2230x, ISO 27017, etc.), NIST, COBIT, SOC2 reporting framework
• Basic knowledge of GRC tools (e.g., ServiceNow)
• Strong analytical and problem-solving skills
• Any added language is appreciated (Japanese, Spanish, German, French, ...) (not mandatory)