Join Deloitte's Cyber team as a Consultant and play a vital role in safeguarding organizations from cyber threats. You'll build strong client relationships while contributing to robust cybersecurity governance, risk management, and compliance initiatives. This role is ideal for professionals passionate about making a tangible impact in the cybersecurity landscape and helping clients navigate complex risks.

As part of the Cyber Governance, Risk & Compliance (GRC) team, you will collaborate with clients across various industries. Your work will focus on strengthening their cybersecurity posture, managing enterprise-level risks, and ensuring adherence to regulatory requirements. We empower organizations to be secure, vigilant, and resilient, turning cyber risk into a strategic advantage.

Your responsibilities will include developing and implementing cybersecurity governance and risk management frameworks. You'll conduct maturity assessments using leading standards like NIST CSF, ISO 27001, and COBIT, alongside performing ITGC testing for access, change, and operational controls. Auditing IT and OT security, assisting with information security control implementation, and supporting regulatory compliance for bodies like RBI, SEBI, and PCI DSS are key aspects.

Further, you will track evolving regulations, conduct PCI DSS assessments, and evaluate application and cloud security governance practices. Preparing comprehensive client deliverables such as risk reports and presentations, and collaborating on cybersecurity transformation projects are also part of the role. You will also perform Third-Party Risk Management (TPRM) assessments.

We are seeking a Consultant with 1 to 3 years of recent experience in Cyber GRC. A strong understanding of security frameworks like NIST, ISO 27001, and COBIT is essential, complemented by excellent analytical, communication, and stakeholder management skills. A Bachelor's degree in Information Security, Computer Science, or a related field (B.E./B.Tech from Tier 1/2 institutions) or a Master's degree is required.

Professional certifications such as CISSP, CISA, CISM, CRISC, or relevant ISO and ITIL certifications are highly preferred. Experience with cloud platforms like AWS, Azure, or GCP, and familiarity with TPRM frameworks would be advantageous. The ability to collaborate effectively and deliver high-quality client work is paramount.