Senior Manager - Cyber Strategy and Transformation

Description & Requirements Who we are looking for Do you want to play a leadership role in helping leading organizations strengthen their cybersecurity, governance, and third-party risk posture ? 🔐

Are you excited by international projects where your expertise directly shapes business resilience and client trust — and where you're the one setting the direction, not just executing it? 🌍

Join our growing Cyber Strategy team as a Senior Manager , leading engagements and people across an international network of experts shaping secure digital futures.

Check us here:Cyber | Deloitte Global What you will bring

• Extensive professional experience (typically 8+ years) in information security, GRC, or Third-Party Risk Management, including several years in a leadership or client-facing advisory capacity
• Proven track record leading complex, multi-stakeholder engagements and managing project teams
• Strong command of English (both spoken and written); additional languages an advantage
• A track record of business development — identifying opportunities, building client relationships, and contributing to proposals
• Ability to mentor and develop junior team members , and to act as a trusted advisor to senior client stakeholders (C-suite, Board, Risk Committees)
• Assertive communication style, executive presence, and excellent situational and political awareness
• Structured, analytical thinking combined with commercial and strategic judgment
• Strong project and program management skills, including budget and stakeholder management

What gives you an advantage

• Deep experience designing or running Third-Party Risk Management (TPRM) programs — vendor risk assessments, due diligence frameworks, ongoing monitoring, contractual security requirements, and vendor incident response
• Hands-on GRC program leadership — governance frameworks, enterprise risk assessments, policy design, compliance program management, and board-level risk reporting
• Experience in IT consulting, IT audit, or IT/cyber risk management at a senior or leadership level
• Background in IT operations, development, or infrastructure with an understanding of how it translates into risk exposure
• Certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor/Implementer
• Deep knowledge of international standards and frameworks ( ISO 27001, COBIT, NIST CSF, NIST 800-161 )
• Familiarity with regulatory frameworks relevant to TPRM and GRC ( DORA, NIS2, GDPR ) and their practical implications for outsourcing and vendor oversight
• Experience in the financial sector or other regulated industries

Your future role

• Leading and growing the firm's TPRM and GRC advisory offerings , shaping methodology, tooling, and go-to-market approach
• Acting as the senior subject matter expert on local and international cybersecurity, GRC, and TPRM consulting and audit engagements
• Owning client relationships — advising C-suite and Board-level stakeholders on cybersecurity strategy, third-party risk exposure, data protection compliance, and IT security governance
• Designing and overseeing TPRM frameworks — vendor risk tiering, due diligence and onboarding assessments, continuous monitoring programs, and contractual security controls
• Leading enterprise risk and compliance programs , ensuring client IT systems, processes, and vendor ecosystems align with leading standards and regulatory requirements (COBIT, ISO 27001, DORA, NIS2, NIST)
• Managing and mentoring project teams , overseeing engagement delivery, quality, budgets, and timelines
• Driving business development — identifying new opportunities, leading proposals, and expanding relationships with existing clients
• Representing the firm at industry events, contributing thought leadership on emerging cyber, GRC, and TPRM topics

What we offer

• Annual Performance Bonus – rewarding excellence and dedication
• Hybrid Work Model
• Extended Health and Pension Coverage – including Medicover services and contributions to health and pension funds
• Group Life and DCE Travel Insurance – comprehensive insurance for security and peace of mind
• BeWell 360 Program – access to sports activities, mental health workshops, gym discounts, and employee assistance
• Professional Development – skill-enhancing training and leadership development opportunities
• SZÉP Card – for accommodation, dining, and recreation

Selection process

• HR interview (phone call, ~15 minutes, in English)
• Professional/leadership interview (online or onsite, ~1 hour, likely with senior stakeholders)
• Welcome on board!

About Deloitte Deloitte is a variety of people, experience, industries and services we deliver in 150 countries of the world. It is an intellectual challenge, a good starting point for your career, and an excellent opportunity for continuous development and gaining valuable life experiences. What you only must do is to take the first step – press the apply button and send us your CV, go through all the stages of the recruitment process and sign a contract with us. Deloitte is simply your best choice.

About the team Why join us?

• Lead high-impact, high-visibility engagements across cybersecurity, GRC, and TPRM for local and international clients across industries
• Shape and grow a strategic service line, with real influence over methodology and team direction
• Build your career with access to global knowledge, methodologies, and certifications
• Join a team that values professional excellence, continuous development, and knowledge sharing — and lead the development of others

This isn't a role for someone who wants to coast. It's for people who get energized by complexity, want their work — and their leadership — to mean something tangible, and who understand that security is both technical and strategic.