Job Specifications
Job Type: PermanentWork Model: HybridReference code: 130773Primary Location: Toronto, ONAll Available Locations: Toronto, ON; Calgary, AB; Ottawa, ON; Vancouver, BC
Our Purpose
At Deloitte, our Purpose is to make an impact that matters. We exist to inspire and help our people, organizations, communities, and countries to thrive by building a better future. Our work underpins a prosperous society where people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and functioning social and economic institutions, and allows our friends, families, and communities to enjoy the quality of life that comes with a sustainable future. And as the largest 100% Canadian-owned and operated professional services firm in our country, we are proud to work alongside our clients to make a positive impact for all Canadians.
By living our Purpose, we will make an impact that matters.
Have many careers in one Firm.
Enjoy flexible, proactive, and practical benefits that foster a culture of well-being and connectedness.
Learn from deep subject matter experts through mentoring and on the job coaching
What will your typical day look like?
As an Incident Readiness Manager, you will lead the strategic development and execution of cyber incident preparedness initiatives for our clients. You will be responsible for designing, facilitating, and overseeing a variety of tabletop exercises (executive, board-level, and technical), developing and maintaining incident response plans and playbooks, and ensuring robust incident response documentation and assessment processes. This role is critical in equipping organizations with the knowledge, tools, and confidence to effectively manage and respond to cyber threats. Your key responsibilities will include:
Tabletop Exercise Development and Leadership:
Design, facilitate, and evaluate incident response tabletop exercises tailored to executive leadership, board members, and technical teams.
Develop customized scenarios reflecting current threat landscapes and organizational risk profiles.
Deliver actionable feedback and after-action reports to drive continuous improvement.
Incident Response Planning and Documentation:
Lead the development, review, and enhancement of incident response plans, playbooks, and related documentation, ensuring alignment with industry standards (e.g., NIST, SANS).
Collaborate with clients to ensure IR documentation reflects organizational structure, technology, and regulatory requirements.
Incident Response Assessments:
Conduct comprehensive IR capability assessments to identify gaps and recommend improvements in processes, technologies, and team readiness.
Benchmark client readiness against industry best practices and regulatory requirements.
Stakeholder Engagement and Training:
Engage with executive and board-level stakeholders to communicate IR strategies, readiness posture, and areas for improvement.
Provide training and awareness sessions to technical and non-technical audiences on IR roles, responsibilities, and procedures.
Continuous Improvement and Best Practices:
Monitor emerging threats, regulatory changes, and best practices to ensure IR plans and exercises remain current and effective.
Drive innovation in readiness methodologies, tools, and approaches.
Collaboration and Leadership:
Supervise and mentor team members engaged in readiness activities.
Foster a collaborative, high-performance team environment focused on client success and operational excellence.
About The Team
Deloitte’s globally recognized Cyber Security practice advises organizations across industries on managing threats, reducing vulnerabilities, mitigating cyber risks, and elevating security programs. Our diverse team collaborates across the full spectrum of cyber services, including security and compliance assessments, technical assessments, governance, control testing, incident response, awareness training, and threat and vulnerability management.
Enough about us, let’s talk about you
You are someone who has:
Leadership & Communication:
Proven experience leading and mentoring teams in high-pressure, dynamic environments.
Strong ability to communicate complex technical concepts to both technical and non-technical stakeholders, including executive leadership.
Demonstrated client management and relationship-building skills.
Excellent time management and organizational abilities.
Ability to remain composed and provide direction during crises.
Experience:
At least 6 years of experience in digital forensics and incident response, or a closely related field, with at least 2 years in a leadership or managerial role.
Significant hands-on experience in delivering tabletop exercises, performing incident readiness assessments, and developing incident response related documentation.
Previous consulting firm experience is a strong asset.
Broad experience in cybersecu