Join Deloitte's Cyber Team as a Deputy Manager in Bengaluru and play a crucial role in safeguarding organizations against cyber threats. This position focuses on managing cyber risk to enable new opportunities, embedding security from the outset of strategy development, and protecting valuable assets. You'll collaborate with clients to enhance their security posture and resilience.

We are seeking an experienced professional to help organizations prevent cyberattacks and protect their valuable assets. Our approach focuses on being secure, vigilant, and resilient, managing cyber risk effectively to unlock new possibilities and embed security into the core of strategic development.

As a Deputy Manager, you will foster strong client and team relationships to surpass expectations. Your key responsibilities include assisting clients with data localization and cross-border data transfer requirements, assessing regulatory and privacy risks, and recommending mitigation strategies. You will analyze data flows, storage, and third-party dependencies to ensure compliance. Developing and implementing robust data localization frameworks, policies, and controls will be essential. Additionally, you will support data discovery, classification, and mapping exercises to identify sensitive data and perform comprehensive risk and impact assessments related to data residency, privacy, and regulatory compliance.

We are looking for a candidate with a minimum of 6 years of experience in Data Localization, Data Privacy, Data Protection, Cyber/Technology Risk, or GRC. A strong understanding of data localization, residency, cross-border transfers, and data sovereignty is essential. Familiarity with Indian and global data protection regulations, including the DPDP Act and GDPR, is required. Experience with data-flow mapping, privacy assessments (DPIA/PIA), and comprehensive risk management frameworks is crucial. Knowledge of cloud environments, third-party risks, and data protection controls is expected. A Bachelor’s degree in Information Technology, Computer Science, Law, Cybersecurity, or a related field is necessary. Preferred qualifications include knowledge of ISO 27001, NIST, and certifications like CIPP/E or CISM.