Michelle Townsend

Risk Manager @Deloitte

Responsible for managing Deloitte UK’s compliance status against the firm’s policies and standards and its legal and regulatory obligations. In carrying out these functions it will include the identification, evaluation and interpretation of all applicable regulatory, statutory and member firm specific information and cyber security requirements, control deficiencies and associated information security risks.\\\\n\\\\nSpecific Responsibilities\\\\n• Work across the CISO function and other risk and control functions to support deployment of the security strategy.\\\\n• Analyse management and technical security controls to ensure that mandated security and compliance requirements are met through the verification of documented processes, procedures and standards.\\\\n• Track organisational compliance for security and mandated security frameworks and policy requirements.\\\\n• Develop and monitor key security controls, identifying reportable key performance and key risk indicators, to track compliance with mandated policies and standards and report on security risk exposures.\\\\n• Support ongoing maintenance of the firm’s ISO 27001 and cyber Essentials certifications.\\\\n• Maintain security control frameworks used to support security assurance activities.\\\\n• Ensure alignment with the firm’s cyber strategy framework.\\\\n• Liaise with Global security teams to keep abreast of new initiative and changes to policies and standards.\\\\n• Assist with internal and external audit requests for the purposes on reporting on the status of key security controls. Manage policy exception requests and liaise with teams to complete supporting risk assessments.\\\\n• Produce management reporting, including metric dashboards summarising KPIs and KRIs, for submission to the firm’s security governance and risk committees.\\\\n• Liaise with the firm’s risk and compliance teams to ensure security reporting is aligned and consistent.\\\\n• Establish and maintain the quality management system to oversee the creation, publication and storage\\\\n \\\\n\\\\n \\\\n \\\\n\\\\n \\\\n