Join Deloitte's Cybersecurity team as a Consultant, specializing in ISO 27001.

We empower organizations to proactively defend against cyber threats and safeguard critical assets. Our approach focuses on building security, vigilance, and resilience, not just in response to attacks, but by integrating cyber risk management into strategic development for effective information and technology risk mitigation. Discover more about our Cybersecurity practice.

Implement and sustain ISO 27001-based Information Security Management Systems for clients.

Assess client security postures, identify gaps and risks, and develop mitigation strategies.

Assist clients with reviewing and implementing information security controls across various domains, including change and incident management, access control, and physical security.

Manage vendor risk assessments and provide clients with a comprehensive view of their outsourcing risk exposure.

Lead information systems audits and advise clients on data privacy, leakage prevention, and access management.

Guide project teams, ensuring timely and effective delivery of security and privacy initiatives.

Requires a minimum of 2 years of experience in ISO 27001 ISMS implementation and sustenance.

Possesses extensive knowledge of industry standards like ISO/IEC 17799, ISO/IEC 27001, COBIT, and ITIL.

Experience in designing and rolling out security programs, IT risk management strategies, and compliance initiatives is essential.

Demonstrated ability in building vulnerability management and secure development lifecycle programs.

Strong understanding of cyber threat and risk assessment, including identifying business implications and tactical/strategic recommendations.

A Bachelor's degree in Computer Science, Information Technology, or a related field is required.

Optional certifications such as ISO27001 LA/LI, CISA, CISSP, or PMP are highly preferred.