Join our cybersecurity team at Deloitte Touche Tohmatsu India LLP in Mumbai. We empower organizations to prevent cyberattacks and safeguard critical assets, focusing on secure, vigilant, and resilient strategies. Our approach integrates cyber risk management into strategic development to effectively handle information and technology risks. Explore the world of Cybersecurity with us and unlock new opportunities.

This role is integral to building robust cybersecurity defenses and managing cyber risk. You will be part of a dynamic team that helps clients navigate the complex threat landscape and protect their valuable data.

Conduct comprehensive cybersecurity risk assessments and provide expert advice on remediation strategies. Develop and maintain essential documentation, including Risk Control Matrices (RCM), workpapers, and detailed reports. Guide and mentor project teams to achieve assessment objectives, consistently exceeding client expectations. Apply deep knowledge of regulatory guidelines and master directions from bodies like RBI, NPCI, SEBI, and IRDAI in audit processes.

Manage and execute projects related to information security, ensuring adherence to global standards. Effectively communicate audit findings and recommendations to senior management through clear and concise reports and presentations.

A Bachelor's degree is required for this position. We are seeking professionals with over 7 years of experience in Cyber Security or IT Audit. A strong understanding of cyber and information security concepts, risk, and controls is essential. Proficiency with global standards such as NIST, ISO, and CSA is expected. Solid knowledge of IT systems, applications, and business functions is necessary.

Expertise in IT infrastructure and networking, including firewalls, IDS/IPS, and security solutions like DLP, Proxy, SIEM, VPN, and EDR is required. Familiarity with cloud security standards for SaaS/PaaS/IaaS, and cloud service providers like AWS, Azure, or GCP is a significant advantage. Possession of technology-based certifications such as CISSP, CISA, CCSP, or GICSP is highly desirable.