Join our Cybersecurity team as an Analyst specializing in Third-Party Risk Management. You will be instrumental in helping organizations fortify their defenses against cyber threats and protect critical assets. This role is pivotal in embedding robust cyber risk management into strategic development, enabling the effective stewardship of information and technology.

Deloitte is at the forefront of cybersecurity, empowering clients to be secure, vigilant, and resilient. We go beyond mere prevention and response, focusing on managing cyber risks to unlock new opportunities and drive business growth. Discover more about our Cybersecurity practice.

Conduct comprehensive Third-Party Risk Assessments and manage Information Security Management Systems (ISMS). Effectively collaborate with clients and manage stakeholder expectations, fostering strong working relationships. Liaise with client teams across compliance, auditing, and regulatory departments to meticulously identify and document various requirements and obligations.

Perform detailed risk assessments and audits focusing on people, processes, and technology. Identify gaps, observations, risks, and opportunities for enhancing policies, processes, procedures, and standards. Document information security risks, recommendations, and compensating controls within clear assessment and audit reports.

A foundational understanding of Third-Party/Vendor/Supplier Risk Management is essential. Knowledge of Data Protection & Privacy risks associated with third parties, along with relevant control frameworks, is crucial. Excellent written and verbal communication skills are a must, complemented by strong documentation and presentation abilities.

This role requires a Bachelor's degree in Computer Science, Information Technology, or a related field. While an overall Cyber TPRM experience of 1 to 7 years is mandatory, we are also considering candidates with 0-1 year of relevant experience in IT Audits or Cloud Security. Experience with ISO22301 implementation and audits is highly valued. Preferred certifications include CBCI, CBCP, ISO22301 LI/LA, OSCP, or CISA. Experience in Infrastructure/Application Security, IT Audit, and Information Risk Management is also beneficial.