Cyber Strategy & Transformation Consultant / Senior Consultant

Deloitte Croatia is a consulting firm with a Cyber team working on resilience and regulatory projects for leading organizations across Europe. The team focuses on cybersecurity strategy, risk management, and digital transformation to help clients protect critical assets and comply with regulations.

• Experience in Cybersecurity, Risk Management, IT Strategy, or Digital Transformation projects.
• Knowledge of cybersecurity standards and frameworks such as ISO 27001, NIST, CIS, or COBIT.
• Familiarity with regulatory requirements including DORA, GDPR, and NIS2 Directive.
• Strong analytical skills for assessing complex environments and providing actionable insights.
• Experience managing projects, timelines, and deliverables in dynamic environments.
• Excellent communication, facilitation, and presentation skills for technical and non-technical audiences.
• Proficiency in English (written and spoken).
• EU residency.

Nice to have:

• Experience with cybersecurity tools and methodologies like vulnerability management tools, SIEM, Identity and Access Management (IAM).
• Proficiency in German (written and spoken).
• NATO clearance.
• Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CISSP, CISM.
• Experience in financial services, insurance, or regulated industries.
• Exposure to emerging technologies and associated risks such as IoT and AI/ML.

• Collaborate with clients to design and implement cybersecurity strategies aligned with business objectives and risk appetite.
• Assist clients with meeting cybersecurity regulatory requirements such as NIS2, DORA, and GDPR.
• Conduct cyber maturity assessments and support transformation programs to enhance cyber capabilities.
• Support identification, analysis, and mitigation of cyber risks related to people, processes, and technology.
• Build trusted client relationships, facilitate workshops, and deliver presentations with actionable recommendations.
• Work with internal teams and client stakeholders to align cybersecurity with enterprise risk management and business strategies.
• Contribute to development and testing of incident response plans for cyber events.

Position requires EU residency.