Join Deloitte Touche Tohmatsu India LLP as a Manager in our Cyber CST team, based in Pune. This role is pivotal in shaping and enhancing organizational cybersecurity postures. You will contribute to robust cyber risk management, ensuring security is integral to strategic development and enables new opportunities.

Deloitte empowers organizations to not only prevent cyberattacks but also to protect critical assets, fostering resilience and vigilance. We approach cybersecurity holistically, managing risk to unlock potential.

Learn more about Cyber | Deloitte.

This position focuses on evaluating cybersecurity capabilities, assessing the effectiveness of security controls, and pinpointing areas for enhancement. You will support strategic initiatives designed to bolster cyber resilience, improve governance, and elevate security maturity across the enterprise. A key aspect involves collaborating with senior stakeholders in cybersecurity, technology, risk, and business units to translate cybersecurity objectives into actionable roadmaps and quantifiable results.

Key responsibilities include leading cyber capability and security control assessments, reviewing controls against established frameworks like NIST CSF, ISO 27001, and CIS Controls. You will identify capability gaps, control deficiencies, and transformation opportunities, developing roadmaps for cyber maturity.

Responsibilities also encompass assisting with control documentation, evidence management, remediation tracking, and evaluating various security domains such as identity, endpoint, network, cloud, and application security. The role requires utilizing Microsoft Sentinel and KQL for control validation and security effectiveness reviews, analyzing security trends, and supporting cyber governance, risk management, and assurance activities.

We are seeking cybersecurity professionals with a strong background in Cyber Risk, Security Controls, Cyber Capability Development, and Security Technology Enablement. A minimum of 8 to 10 years of experience in Cybersecurity, Cyber Risk, Security Controls, Governance, Compliance, or Cyber Transformation is required.

Essential qualifications include a solid understanding of cybersecurity control frameworks and industry standards, with exposure to NIST CSF, ISO 27001, or CIS Controls. Proficiency in Microsoft Sentinel and KQL for security analysis and control validation is crucial.

Proven experience in leading security control reviews, risk assessments, or capability assessments is necessary. Knowledge of identity, endpoint, network, cloud, and application security domains, coupled with strong analytical, problem-solving, stakeholder engagement, documentation, reporting, and communication skills, are vital for success in this role.

An educational background with a B.E./B.Tech (Tier 1/2) or a Master’s degree in Information Security, Computer Science, or a related field is expected.