Join our dynamic Cyber team as an Assistant Manager, focusing on Risk Management in Bengaluru. At Deloitte, we empower organizations to fortify their defenses against cyber threats and safeguard critical assets. Our approach emphasizes security, vigilance, and resilience, moving beyond mere prevention to proactive cyber risk management that unlocks new opportunities. You will play a key role in integrating cyber risk considerations into strategic development for effective information and technology risk management.

Key responsibilities include supporting the implementation and monitoring of ISO 27001-based Information Security Management Systems (ISMS). You will also be instrumental in executing Third-Party Risk Management (TPRM) activities, conducting vendor risk assessments, due diligence, and ongoing monitoring. Performing risk assessments and gap analyses for cyber strategy, controls, and compliance frameworks is essential. Effectively liaising with clients and managing stakeholder expectations, while collaborating with compliance teams, auditing, and regulators to document requirements will be central to your role. Conducting risk assessments and audits covering people, process, and technology, identifying gaps and proposing improvements, and documenting risk assessments and recommendations in reports are also key functions.

We are seeking candidates with 3 to 5 years of experience in Third-Party Risk Management, preferably from a Big 4 firm or industry. Experience in IT Audits and Cybersecurity gap assessments is highly valued. Familiarity with ISO 27001 and ISO 22301 implementations and audits is preferred. Candidates should possess an understanding of third-party/vendor/supplier risk management, along with knowledge of data protection and privacy risks related to third parties. Excellent written and verbal communication, documentation, and presentation skills are crucial. A Bachelor’s degree in information technology, Computer Science, Business Administration, Engineering, or a related field is required. Relevant certifications such as CISSP, CISA, CISM, CEH, or ISO 27001 are advantageous.