Join Deloitte's Cyber team as a Manager in Pune, focusing on Third-Party Risk Management (TPRM). We empower organizations to prevent cyberattacks and safeguard assets through robust security, vigilance, and resilience strategies. Our approach integrates cyber risk management from the outset of strategy development to effectively manage information and technology risks, fostering opportunities for growth and innovation.

This role involves cultivating strong relationships with clients and internal teams, consistently exceeding expectations. You will provide technical leadership in security architecture reviews for AI platforms and data environments, alongside proven consulting experience in managing client relationships, project teams, and deliverables. Excellent communication skills, including executive presentations and report writing, are essential for success.

Lead comprehensive Third-Party Risk Management (TPRM) engagements, acting as the subject matter expert and providing framework guidance. Manage client discussions, workshops, and risk reviews, while developing and overseeing risk scoring models and dashboards.

Drive remediation planning and risk mitigation activities, and actively support proposals, RFP responses, and client presentations. Utilize TPRM tools such as ServiceNow, Archer, and ProcessUnity, ensuring compliance with regulatory requirements like DORA and FedRAMP.

Oversee privacy risk assessments for third-party engagements and manage ITGC, PCI DSS, and third-party control testing. Review risk assessment outcomes to provide executive-level reporting and mentor team members to ensure high-quality project delivery.

Possess deep expertise in third-party risk management, IT security, and compliance. Demonstrate experience with security frameworks and standards including ISO 27001, NIST, and COBIT, along with familiarity with regulatory standards like DORA and FedRAMP.

Required skills include strong stakeholder management and leadership capabilities, with hands-on experience using TPRM tools. Knowledge of privacy frameworks and data protection requirements is crucial, complemented by strong analytical, communication, and stakeholder management skills.

Candidates should hold a Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, coupled with 7-10 years of relevant experience in cybersecurity consulting, risk management, and compliance.