Join our Cyber Strategy & Transformation team in Pune as an Assistant Manager focusing on Third-Party Risk Management. Deloitte empowers organizations to proactively defend against cyber threats and safeguard critical assets. We champion a secure, vigilant, and resilient approach by integrating cyber risk management into strategic development, ensuring effective handling of information and technology risks. Discover more about our Cybersecurity offerings.

This role offers a dynamic environment to shape cyber resilience and protect client information. You will be instrumental in developing robust strategies to mitigate evolving cyber risks.

Conduct comprehensive Third-Party Risk Assessments and ISMS evaluations. Effectively communicate with clients and manage stakeholder expectations across diverse departments, including compliance, auditing, and regulatory bodies.

Perform detailed risk assessments and audits covering people, processes, and technology. Identify gaps, risks, and opportunities for improvement in policies, processes, and standards. Document findings, recommendations, and compensating controls in clear assessment and audit reports.

Demonstrated understanding of Third-Party, vendor, and supplier risk management principles. Knowledge of data protection and privacy risks associated with third parties, along with relevant control frameworks, is essential.

Key skills include excellent written and verbal communication, strong documentation and presentation abilities, and a high level of motivation to work in global and local settings. A Bachelor's degree in Computer Science, Information Technology, or a related field is required. Relevant experience of 2+ years in IT Audits or Cloud Security is needed. Cyber TPRM experience ranging from 1 to 7 years is mandatory. Experience with ISO22301 implementation and audits is highly preferred. Security certifications like CISSP, CISA, CISM, CEH, ISO27001, CBCI, CBCP, or ISO22301 LI/LA are advantageous for working in a cross-functional environment.