Cyber Manager - Cloud DevSecOps

Overview In this role, you lead DevSecOps and Secure-by-Design initiatives to scale secure software delivery across cloud environments. You act as the primary client contact, guiding cross-functional teams through assessments, roadmaps, and implementation. You shape secure operating models and governance, including AI-enabled security automation, to reduce risk while maintaining velocity. The role offers strategic impact across business and technology leadership within a global security practice. Compensation / Benefitsdiscretionary annual incentive programaccommodations for people with disabilitiescareer development and mentorship opportunities ResponsibilitiesLead complex DevSecOps and Secure-by-Design engagements from assessment to delivery and operationsAdvise senior stakeholders across Cybersecurity, Engineering, Cloud, and Risk on security strategy and solutionsDrive maturity assessments and transformation roadmaps spanning people, process, technology, and governanceDesign Secure-by-Design operating models integrating security across the application lifecycleLead AI-enabled DevSecOps initiatives and AI-assisted vulnerability remediation within CI/CD pipelinesEstablish AI governance, threat modeling, data protection, and guardrails for automationDefine secure application intake, risk classification, assessments, and go-live governanceTranslate policies and frameworks (NIST CSF, NIST 800-53, OWASP, ISO 27001) into actionable controlsGuide integration of AppSec capabilities (SAST, DAST, SCA, IaC, container, API security) into pipelinesAdvance software supply chain security (SBOM, code signing, artifact integrity)Assess and improve cloud-native and container security; prioritize remediation with velocityDefine DevSecOps operating models, governance structures, and executive dashboardsMentor cross-functional onsite and offshore teams; manage engagement scope, schedule, risks, and budgetSupport business development through proposals, scopes, and client presentationsContribute to Deloitte DevSecOps capabilities, accelerators, methodologies, and thought leadership Key requirementsBachelor's degree in Computer Science, Cybersecurity, IT, Engineering, Information Systems, or related discipline6+ years experience in DevSecOps, Application Security, Secure SDLC, Cloud Security, or cybersecurity consulting3+ years progressively responsible people management and staffing accountability3+ years leading DevSecOps, AppSec, Secure SDLC, or Secure-by-Design projects with delivery ownership2+ years in DevSecOps or Secure SDLC assessments, operating model design, or roadmap development2+ years with CI/CD and AppSec tech, including at least 3 of SAST, DAST, SCA, secrets scanning, IaC scanning, container security, API security, threat modeling, vulnerability management2+ years translating cybersecurity policies into technical controls or SDLC workflowsExperience applying at least 2 cybersecurity frameworks (e.g., NIST CSF, NIST 800-53, NIST SSDF, OWASP SAMM, ISO 27001)1+ year cloud or cloud-native security experience on Azure/AWS/GCP or Kubernetes/containers1+ year using governance/automation tools (ServiceNow, Jira, Azure DevOps, GitHub, GitLab)Experience leading geographically distributed or cross-functional teamsExperience engaging with clients on cybersecurity or technology projects, including status reporting and workshopsExperience contributing to business development activities (proposals, RFPs, scopes, presentations)Ability to travel up to 50%Limited immigration sponsorship may be availableIndependence with collaborative mindsetStrong written and verbal communicationAttention to detail and qualityDevSecOps and Secure SDLCCI/CD pipelines integration of security (SAST, DAST, SCA, secrets scanning, IaC, container, API security)Threat modeling and vulnerability management