Join Deloitte's Cyber team as a Consultant in Bangalore, focusing on Third-Party Risk Management (TPRM). Our cybersecurity practice helps organizations fortify defenses against cyberattacks and safeguard critical assets. We champion a secure, vigilant, and resilient approach, integrating cyber risk management into strategic development to effectively handle information and technology risks.

Explore opportunities to embed robust cybersecurity measures from the outset of strategy formulation, enhancing the management of information and technology-related vulnerabilities. Learn more about our comprehensive Cybersecurity offerings and how we empower clients to navigate the evolving threat landscape.

This role involves conducting ISMS and Third-Party Risk Assessments, requiring you to liaise effectively with clients and manage stakeholder expectations. You will collaborate with diverse client teams, including compliance, auditing, and regulatory bodies, to identify and document various requirements and obligations.

Responsibilities include performing risk assessments and audits focused on people, processes, and technology. You'll be tasked with identifying gaps, observations, risks, and opportunities for improvement in policies, processes, procedures, and standards. A key part of this role is documenting information security risks, recommendations, and compensating controls through detailed assessment and audit reports.

We are seeking candidates with a strong understanding of third-party, vendor, or supplier risk management. Essential knowledge includes Data Protection & Privacy risks associated with third parties and relevant control frameworks. Excellent written and verbal communication, documentation, and presentation skills are crucial.

Ideal candidates are highly motivated, adaptable to local and global environments, and possess a Bachelor's degree in Computer Science, Information Technology, or a related field. A minimum of 2 years of relevant experience in IT Audits or Cloud Security is required. Specific experience in Cyber TPRM, ranging from 1 to 7 years, is mandatory. Experience with ISO22301 implementation and audits is also a key requirement.