Join our dynamic team at Deloitte, where we empower organizations to build robust cyber defenses and protect critical assets. We focus on creating secure, vigilant, and resilient environments by integrating cyber risk management into strategic planning, enabling new opportunities through effective information and technology risk management. Explore the world of Cyber | Deloitte and discover how we're shaping the future of cybersecurity.

This role involves assessing cybersecurity capabilities, evaluating the effectiveness of security controls, identifying areas for enhancement, and driving strategic initiatives to bolster enterprise-wide cyber resilience, governance, and security maturity. Key responsibilities include conducting comprehensive cyber capability and security control assessments, reviewing controls against established frameworks like NIST CSF, ISO 27001, and CIS Controls, and supporting the development of cyber maturity roadmaps.

Further duties encompass assisting with control documentation, managing evidence, tracking remediation efforts, and evaluating various security domains such as identity, endpoint, network, cloud, and application security. You will also monitor security events and alerts using tools like Microsoft Sentinel and KQL to validate control effectiveness and contribute to cyber transformation programs.

We seek cybersecurity professionals with 2-4 years of experience in areas such as Cyber Risk, Security Controls, Governance, Compliance, or Cyber Transformation. A solid understanding of cybersecurity control frameworks and industry standards, including NIST CSF, ISO 27001, or CIS Controls, is essential.

Proficiency with Microsoft Sentinel and KQL for security analysis and control validation is required. Experience in security control reviews, risk assessments, or capability assessments, along with knowledge of identity, endpoint, network, cloud, and application security domains, is crucial. Strong documentation, reporting, and communication skills are also vital for this role. A B.E./B.Tech or Master's degree in Information Security, Computer Science, or a related field is expected.