Join our dynamic Information Technology team as an Information Security Manager in Mumbai. This role focuses on enhancing employee experience through robust application support and security.

As a key member of the Enabling Areas – Information Technology team, you will be instrumental in building and maintaining critical applications for Deloitte, with a strong emphasis on information security.

This position offers a hybrid work model, reflecting our commitment to flexibility and collaboration. You will be based in Mumbai, a vibrant hub for professional growth and innovation.

Your responsibilities will encompass managing client security assessments and ensuring security is embedded in customer contracts. You will maintain information security policies, standards, and governance frameworks.

Key duties include ensuring compliance with ISO 27001, NIST, and privacy regulations. You'll oversee vulnerability management, penetration testing, incident response, and conduct security architecture reviews.

Furthermore, you will manage cloud and infrastructure security, collaborate on cyber risk mitigation, and deliver security awareness programs. Monitoring security metrics and compliance status will also be crucial.

We are seeking an experienced Information Security professional with 8-12 years of relevant experience. A Bachelor’s degree in Information Technology, Computer Science, or a related field is required.

Essential skills include a strong understanding of ISO 27001, NIST, vulnerability management, and incident response. Experience with cloud security, security architecture, and threat modeling is vital.

Proficiency in privacy regulations, third-party risk management, and audit processes is expected. Knowledge of AI security and Generative AI governance is a plus. The ability to manage multiple security initiatives independently is also key.