Join Deloitte's Cyber practice as a Manager, focusing on AI security and governance. This role offers the opportunity to work with senior leadership and clients, enhancing organizational capabilities in a critical and evolving field. Deloitte empowers organizations to proactively prevent cyberattacks and safeguard valuable assets, fostering a culture of security, vigilance, and resilience. We aim to embed cyber risk management into strategic development, enabling the pursuit of new opportunities.

Learn more about the impactful work in Cybersecurity at Deloitte.

As a Manager, you will guide teams and manage client information security postures, identifying and mitigating gaps and risks. You'll recommend security solutions aligned with business objectives and the threat landscape, and conduct thorough security risk assessments for third-party vendors. Developing and integrating Third-Party Risk Management (TPRM) frameworks into the broader risk management program is key. You will also perform cybersecurity maturity assessments using established frameworks like NIST CSF, NIST-800-53, and ISO 27001, and lead Information Security Management System (ISMS) implementation projects based on ISO 27001.

This role demands expertise in developing and maintaining risk and governance frameworks, leading risk identification, evaluation, and mitigation activities. You will deliver actionable insights and improvement roadmaps following assessments. A strong understanding of application security architectures, including secure SDLC, threat modeling, and secure coding, is essential. You'll plan and execute comprehensive IT and OT security audits, and manage security and cyber strategy projects, providing day-to-day team guidance. Experience with information security controls in areas such as change management, incident management, access management, and physical security is required. Familiarity with PCI DSS assessments, cloud security models (AWS, Google Cloud, Azure), and ITGC control testing is also crucial. Ensuring compliance with regulatory guidelines from RBI, SEBI, IRDA, BCAS, and NCIIPC is a core responsibility. This position requires a Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field. Strong client-facing and relationship-building skills are expected.