Join Deloitte's Cyber Strategy & Transformation team in Pune as a Consultant, specializing in Security Frameworks and Standards. This role is crucial for organizations aiming to prevent cyberattacks, protect valuable assets, and manage cyber risk effectively.

We empower clients to be secure, vigilant, and resilient by embedding cyber risk management into their strategic development. Become part of a team that helps clients unleash new opportunities through robust information and technology risk management. Learn more about the impact of Cyber at Deloitte.

As a Consultant, you will assess cybersecurity capabilities, evaluate the effectiveness of security controls, and identify areas for enhancement. You will support strategic initiatives aimed at boosting enterprise-wide cyber resilience, governance, and overall security maturity.

Key responsibilities include conducting assessments against frameworks like NIST CSF, ISO 27001, and CIS Controls. You will also support the development of cyber maturity roadmaps, manage control documentation, and track remediation efforts. Evaluating various security domains such as identity, endpoint, network, cloud, and application security is a core part of this role. Utilizing tools like Microsoft Sentinel and KQL for security analysis and control validation will be essential.

This position requires 2-4 years of experience in Cybersecurity, Cyber Risk, Security Controls, Governance, Compliance, or Cyber Transformation. A solid understanding of cybersecurity control frameworks and industry standards is essential.

Proficiency with frameworks such as NIST CSF, ISO 27001, or CIS Controls is expected. Working knowledge of Microsoft Sentinel and KQL for security analysis is vital. Experience in security control reviews, risk assessments, or capability assessments is necessary. Familiarity with identity, endpoint, network, cloud, and application security domains is required.

Candidates should possess strong documentation, reporting, and communication skills. A B.E./B.Tech (Tier 1/2) or Master’s degree in Information Security, Computer Science, or a related field is a prerequisite.