Join Deloitte's Cyber team as an Associate Director to lead and innovate in Information Security Management Systems (ISMS). You will be instrumental in helping organizations fortify their defenses against cyber threats and safeguard critical assets. Our team champions a proactive approach to security, ensuring resilience and enabling new opportunities through effective cyber risk management.

Develop and implement robust risk and governance frameworks. Guide client engagements by assessing information security postures, identifying vulnerabilities, and designing mitigation strategies. Recommend advanced security solutions aligned with business objectives and the evolving threat landscape. Establish and integrate Third-Party Risk Management (TPRM) frameworks. Conduct cybersecurity maturity assessments using leading standards like NIST CSF, NIST-800-53, and ISO 27001. Spearhead ISO 27001 ISMS implementation and maintenance projects. Lead risk identification, evaluation, mitigation, and monitoring efforts. Conduct Information Systems audits on IT infrastructure. Manage and guide teams on security and cyber strategy projects, ensuring timely delivery of tasks. Assist clients in reviewing and implementing security controls across various domains, including change management, incident management, access management, and physical security. Provide expert guidance for remediation actions to ensure continuous compliance. Demonstrate a deep understanding of complex business and IT management processes. Ensure adherence to cybersecurity regulations from bodies like RBI, SEBI, and IRDA. Assess cloud security controls across AWS, Google Cloud, and Azure. Plan and execute IT General Controls (ITGC) testing, identifying and supporting the remediation of control gaps. Foster strong client relationships through effective interaction with stakeholders.

A Bachelor's degree in Information Security, Computer Science, or a related discipline is required, with a Master's degree in Cybersecurity or Business Management being a strong advantage. We seek candidates with 10-15 years of substantial experience in cybersecurity consulting, risk management, and compliance. Essential skills include an in-depth understanding of security frameworks and standards such as NIST, ISO 27001, and COBIT. Strong analytical, communication, and stakeholder management capabilities are crucial. Familiarity with cloud service models and security controls across major platforms (AWS, Google Cloud, Azure), as well as experience with ITGC control testing and knowledge of regulatory guidelines from RBI, SEBI, IRDA, BCAS, and NCIIPC, are highly valued.