Join Deloitte's Cyber Strategy & Transformation team as an Assistant Manager in Mumbai. Our cybersecurity practice focuses on empowering organizations to prevent cyberattacks, protect critical assets, and build resilience. We integrate cyber risk management into strategic development, enabling effective handling of information and technology risks to unlock new opportunities. Explore our Cybersecurity offerings to learn more.

This role involves supporting privacy and vendor risk consulting projects. You will assist clients in establishing robust privacy and risk management frameworks, ensuring compliance with relevant regulatory and industry standards. A strong grasp of data privacy principles, third-party risk management, and Governance, Risk, and Compliance (GRC) is essential, complemented by excellent analytical and communication abilities.

Support the delivery of privacy and vendor risk consulting engagements. Assist clients in implementing comprehensive privacy and risk management frameworks. Contribute to ensuring compliance with applicable regulatory and industry standards. Conduct risk assessments across a bank's IT and security ecosystem. Assess cybersecurity frameworks against RBI guidelines.

We are seeking candidates with a solid understanding of data privacy principles, third-party risk management processes, and GRC concepts. Strong analytical and communication skills are a must.

Key qualifications include: - BE (IT, CS) or MCA degree. - Certifications such as OSCP, CISA, CISM, CISSP, CRISC, and ISO 27001-2013 are highly valued. - Experience with Risk Assessments within a bank's IT and security environment. - Familiarity with Databases, IBM QRadar (SIEM), and IBM SOAR (G-Soar). - Knowledge of Cloud Infrastructure and Services, Endpoints, End-User Computing Environments, Office 365, Antivirus Solutions, and AI tools like Copilot. - Understanding of Network and Security Infrastructure. - Experience with Cyber Security Framework assessment according to RBI guidelines. - Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field is required.