6 minute read

‘At Deloitte Cyber we work with people from all different backgrounds’

Frank and Iris approach their work with the belief that a successful career involves more than just work. They want their careers to contribute something to society. In their role as cyber specialists, they protect large public organizations as well as private companies.

[Draft Header 1]

[Draft Header 1]

Frank Groenewegen (37), Partner Cyber Risk at Deloitte and widely recognized as an authority in the cyber world, is an autodidact who started playing with computers as an eight-year-old. 'I was always up to mischief on the internet when I was a kid,' he admits. I thought that hacking was so cool that at one point I thought, ‘I need to do this as a job, but in a good way.’ I soon rolled into what everybody now knows as cyber security and to this day, my work is my hobby.' 'Keeping systems safe and secure is an ongoing cat and mouse game we play against hackers,' Frank explains. 'It's very exciting because you constantly have to come up with clever new tricks to thwart their cunning plans and be a few steps ahead of them I made the switch to Deloitte two years ago because II began to realize more and more that making and keeping companies secure in the long term requires much more than just knowledge of technology. I had worked on a couple of joint projects with Deloitte. So I knew they already adopted a comprehensive approach I believe is necessary for success in this business. I also knew I'd be surrounded by the brightest minds with vast experience in those other domains important to safeguarding companies from hackers, such as strategy and change management.'

[Draft Header 2]

[Draft Header 2]

Iris Bosma (29) studied Law and Information Science and completed a master's degree in Business Information Systems. She came to the Cyber Strategy team after an initial period with the Privacy team and now focusses on strategic organizational challenges and change management in the public sector. 'Cyber security is a complex challenge for many organizations. Vital systems and service outages can have huge consequences for society and public safety. It gives me energy to know that our work really matters.’

[Draft Header 3]

[Draft Header 3]

Multidisciplinary teams Deloitte's Cyber team helps organizations become digitally safe. 'In order to do so, we need the combined knowledge of a variety of disciplines,' says Iris. 'From data science to psychology and business administration; only a multidisciplinary team can tackle complex cyber security issues.' Frank directs the Offensive team, one of Deloitte Cyber’s technical sub-teams. 'We're the nerds who hack on demand,' Frank explains. 'The purpose of that hacking is to expose vulnerabilities that can be exploited by criminals.' Iris continues: 'In the Strategy team, we focus on the bigger picture. How does an organization get a grip on the risks? How to respond to future threats? And what governance structure is needed in order to be successful?’

[Draft Header 4]

[Draft Header 4]

Frank wants to help raise awareness. ‘Companies still have no or insufficient control over their own cybersecurity. Isn't that bizarre, considering they're totally dependent on computer? It’s not uncommon for us to come to a company that has been hacked and the people there wonder how it could have happened to them. 'Well,' I then say, 'you didn't have the basics right: no two-step verification, your backups weren't properly protected and your systems weren't up to date.' That must change and that's what we want to tell our clients..' After awareness is raised, it’s time to learn from the mistakes that were made. 'We recently helped a company whose factory had been shut down by hackers who demanded ransom. We researched and set to work. How did they get in? Has anything been stolen? Are they still inside? What needs to be done to get production back online? Then after a couple of weeks, when I can gave the ‘all clear’ sign, the factory started running safely again and a number measures had been taken to prevent recurrences. The company also took measures to remain safe in the long term and that is when I’m satisfied.'

[Draft Header 5]

[Draft Header 5]

Create your own career Iris enjoys the dynamic atmosphere, the drive, enthusiasm and the room for development at Deloitte. 'You're encouraged to discover and explore your strengths and interests. Someone might specialize in cryptography or cloud security, and others in privacy legislation or awareness.' Iris herself has chosen to take a postgraduate course in Business Administration. 'A thorough understanding of what it takes to manage a company is very relevant when you're offering advice to CISO’s or boardrooms.' The variety of assignments conducted by the Cyber team also enables her to grow. 'Not a single project is the same; each client faces a different set of problems. That versatility and complexity makes our work so interesting and challenging. And by working on such diverse assignments, you soon find out which domains of our profession appeal to you the most.' 'That's right,' says Frank. "When you join Deloitte, you first look around a bit to gain some experience, and when you are a few months ahead, you think, "Hey, this is really cool!" You start digging deeper, taking advanced courses in your chosen specialty and seeking out projects that match your aspirations. At one point, your colleagues know it too: "If it's a matter of organizational strategy or change management in the public sector, then we need Iris on the team!" So in that sense, you can steer a course and create your own career. And Deloitte does everything to help you: never have I ever seen a company invest so much time and money in its talent.'

[Draft Header 6]

[Draft Header 6]

CHOOSE YOUR IMPACT You will share your talent with the 900 colleagues of Deloitte The Netherlands various Strategy, Risk & Transactions Advisory departments. Within our teams, cooperation and personal development are key. View all Strategy, Risk & Transactions Advisory vacancies [https://careersatdeloitte.com/vacancies/strategy-risk-transactions-advisory] and connect your future to Deloitte. View all Strategy, Risk & Transactions Advisory vacancies [/vacancies/strategy-risk-transactions-advisory]
6 minute read

'At Deloitte I can learn in the way that I find most comfortable.'

DANIEL VAN NIEUWMEGEN
IT Risk Consultant CORE

Connect your future to deloitte