Seeking a Deputy Manager to lead Third Party Risk Management (TPRM) within our Cyber Strategy & Transformation team in Delhi. This role is instrumental in safeguarding client environments through robust risk assessments and strategic advisory services.

Join a dynamic team at Deloitte Touche Tohmatsu India LLP, where you'll contribute to enhancing cybersecurity and operational resilience for a diverse clientele. This position offers a platform to shape risk management frameworks and drive innovation in the cybersecurity landscape.

Lead engagement teams in executing comprehensive TPRM assessments, technology risk reviews, and security audits across various client settings. Develop and refine critical TPRM documentation, including policies, procedures, SOPs, governance frameworks, and operating models. Implement vendor lifecycle management processes, covering everything from onboarding and due diligence to ongoing monitoring and offboarding.

Define and establish effective risk tiering methodologies, assessment criteria, and escalation protocols. Conduct in-depth technical control assessments for infrastructure, cloud, applications, and databases, focusing on key security domains. Evaluate third-party security postures against leading cybersecurity standards and frameworks, supporting secure design reviews.

A proven track record in leading TPRM assessments, technology risk reviews, and security audits is essential. Expertise in developing and enhancing TPRM policies, procedures, and governance frameworks is required.

Solid understanding of risk tiering, assessment criteria, and exception management is crucial. Experience in conducting technical control assessments across infrastructure, cloud, applications, and databases is necessary. Familiarity with cybersecurity frameworks such as ISO 27001, NIST, and PCI DSS is expected.

Ability to interpret and apply regulatory requirements related to outsourcing, data protection, and operational resilience is important. Experience in supporting proposal preparation, solution development, and guiding team members is beneficial. Driving capability building initiatives and promoting AI-enabled GRC automation is a key aspect of this role.