Consultant - Manager | Cyber Operate | Third-Party Risk Assessor | KSA

Deloitte is seeking a Consultant - Manager with expertise in Cyber Operate and Third-Party Risk Assessment to join their team in Riyadh, Saudi Arabia. This role involves designing and managing the Third-Party Risk Management (TPRM) framework and lifecycle to ensure robust cybersecurity for the organization.

Deloitte drives progress by helping clients become leaders wherever they choose to compete. They invest in outstanding people of diverse talents and backgrounds, empowering them to achieve more. Their work combines advice with action and integrity, believing that stronger clients and society lead to a stronger Deloitte.

Join Deloitte and contribute to making an impact that matters. We are looking for talented professionals to deliver outstanding value to clients, providing an exceptional career experience in an inclusive and collaborative culture. Apply now to be part of a team that contributes to society by building confidence and trust in the markets.

Company Overview

Deloitte is one of the largest and most prestigious professional services firms globally, recognized for its commitment to progress and its impact on clients, people, and society. They have received numerous awards, including Best Employer in the Middle East and Best Consulting Firm.

Their purpose is to make an impact that matters by challenging themselves daily to do what matters most. They serve clients distinctively, offering innovative insights, solving complex challenges, and unlocking sustainable growth. Deloitte inspires its professionals with an exceptional career experience and an inclusive, collaborative culture, while contributing to society by upholding integrity and supporting communities.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Experience: 2 Year+
• Qualifications: Bachelor's in IT, cybersecurity or a related field

Key Responsibilities

• Design and maintain the TPRM framework, including policy, processes, procedures, and SOPs.
• Build supporting toolkits such as tiered questionnaires, evidence checklists, and assessment templates.
• Embed TPRM steps into procurement and contract management processes.
• Define TPRM KPIs and KRIs and update the framework regularly.
• Run the third-party risk lifecycle, including tiering, due diligence, and reassessments.
• Assess third parties by reviewing security questionnaires, evidence, and conducting remote/on-site assessments.

Requirements

• Bachelor's in IT, cybersecurity, or a related field.
• 2-8 years of hands-on experience assessing vendors' cybersecurity against ISO/IEC 27001, NIST, or NCA requirements.
• Experience designing or updating a TPRM framework, policy, procedures, or SOPs.
• Ability to read and challenge SOC 2 reports, ISO certificates, and security evidence.
• Understanding of supply chain risks, including fourth parties, concentration, and software/hardware supply chain threats.
• Working knowledge of NCA ECC third-party and cloud requirements, and PDPL.
• Experience with a TPRM platform (e.g., OneTrust, ProcessUnity, Archer, ServiceNow VRM).
• At least one preferred certification: CTPRP, CISA, ISO/IEC 27001 Lead Auditor.

Benefits

• Opportunities for professional development and career growth within a leading professional services firm.
• Work in an inclusive and collaborative culture.
• Contribute to impactful projects for major clients.
• Gain experience in a dynamic cybersecurity and risk management field.
• Be part of a globally recognized and awarded organization.