Join a leading cybersecurity team dedicated to safeguarding organizations and their critical assets. We focus on building resilience against cyber threats by integrating cyber risk management into strategic development, enabling the secure pursuit of new opportunities. This role plays a vital part in managing information and technology risks effectively.

Deloitte is at the forefront of helping clients navigate the complex landscape of cybersecurity. Our approach emphasizes being secure, vigilant, and resilient, extending beyond mere defense to proactive risk management that empowers businesses. Discover more about our Cybersecurity services.

Engage in Information Security Management Systems (ISMS) and Third-Party Risk Assessments, ensuring robust oversight. Effectively collaborate with clients and manage stakeholder expectations to foster strong working relationships. Liaise with diverse client teams, including compliance, auditing, and regulatory bodies, to accurately identify and document requirements and obligations. Conduct comprehensive risk assessments and audits, evaluating people, processes, and technology. Identify gaps, risks, and opportunities for improvement in policies, processes, procedures, and standards. Prepare detailed assessment and audit reports, documenting information security risks, recommendations, and compensating controls.

A strong understanding of Third-Party, Vendor, and Supplier Risk Management principles is essential. Proficiency in Data Protection and Privacy risks related to third parties, along with relevant control frameworks for Third-Party Risk Management. Exceptional written and verbal communication skills are a must. Demonstrated excellence in documentation and presentation abilities. Hunny motivated individuals eager to work in dynamic local and global environments are encouraged to apply. This role requires relevant experience of 6+ years in IT Audits and Cloud Security, with a mandatory 1 to 7 years of Cyber TPRM experience. Experience with ISO22301 implementation and audits is highly valued. Preferred certifications include CBCI, CBCP, ISO22301 LI or LA, Offensive Security Certified Professional, and CISA. Familiarity with security certifications like CISSP, CISA, CISM, CEH, and ISO27001 is advantageous. Experience in Infrastructure/Application Security, IT Audit, and Information Risk Management is also beneficial.