Join our dynamic Cyber Risk team at Deloitte Touche Tohmatsu India LLP as an Assistant Manager in Delhi. We empower organizations to proactively defend against cyber threats and safeguard critical assets. Our approach integrates security, vigilance, and resilience, enabling clients to manage cyber risk effectively and seize new opportunities. We embed cyber risk considerations from the outset of strategy development for superior management of information and technology risks.

This role offers a significant opportunity to contribute to cutting-edge cybersecurity consulting engagements. You will play a crucial part in advising clients on risk management, governance, compliance, security assessments, and technology risk. Collaboration with both clients and internal teams will be key to identifying vulnerabilities, enhancing security postures, implementing remediation strategies, and delivering impactful cybersecurity solutions.

As an Assistant Manager, you will be instrumental in developing and implementing robust cybersecurity governance and risk management frameworks. Your duties will include conducting comprehensive risk assessments, pinpointing security gaps, and proposing effective mitigation strategies.

You will perform detailed cybersecurity maturity assessments utilizing industry-standard frameworks like NIST CSF, NIST 800-53, ISO 27001, and COBIT. A significant focus will be on leading or supporting ISO 27001 ISMS implementation, maintenance, and compliance activities. Additionally, you'll conduct Third-Party Risk Management (TPRM) assessments and vendor security reviews.

Your role will involve planning and executing IT/OT security assessments, ITGC testing, and Information Systems audits. You will also assess application security practices, including secure SDLC, threat modeling, and security controls, as well as support PCI DSS assessments, gap analysis, and remediation efforts. Ensuring adherence to regulatory requirements from bodies like RBI, SEBI, IRDAI, BCAS, and NCIIPC will be essential. Furthermore, you will review cloud security controls across AWS, Azure, and Google Cloud environments.

Key duties also include managing assigned workstreams, mentoring junior team members, and ensuring the timely delivery of projects. Building and maintaining strong relationships with clients and stakeholders is paramount to success in this role.

We are seeking candidates with a Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field. Professional certifications such as CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI, ITIL, or PCI QSA are highly preferred.

This position requires 4–6 years of relevant experience in Cybersecurity Consulting, GRC, Risk Advisory, or Information Security. A strong understanding of cybersecurity frameworks including NIST, ISO 27001, COBIT, and PCI DSS is essential.

Exceptional analytical, communication, stakeholder management, and problem-solving skills are a must. The ability to effectively manage multiple engagements within a fast-paced consulting environment is also critical for success in this role.