Join Deloitte Touche Tohmatsu India LLP in Mumbai as an Assistant Manager in Network Security. This role is within the Cyber: D&R team, focusing on protecting valuable assets and managing cyber risk to enable new opportunities. The position involves embedding cyber risk management into strategy development for effective information and technology risk handling.

Learn more about Cybersecurity at Deloitte and become part of a team that helps organizations prevent cyberattacks, remaining secure, vigilant, and resilient.

Assess network architecture and security zoning based on CISA Zero Trust Architecture Framework and segmentation controls. Evaluate security controls against industry frameworks like ISO 27001, NIST, CIS Controls, SOC 2, and relevant regulatory requirements. Perform detailed configuration reviews of network devices and security solutions including switches, routers, firewalls, WAF, Active Directory, proxies, VPN, IDS/IPS, antivirus, and DLP.

Identify control gaps and propose effective remediation actions. Review firewall rules and access controls to ensure secure configurations. Maintain comprehensive audit documentation and working papers. Collaborate closely with stakeholders to understand risks and controls. Continuously stay updated on emerging threats and best security practices.

A minimum of 2-5 years of experience in network security or cybersecurity is essential. A strong grasp of network protocols such as TCP/IP, DNS, and HTTP is required. Hands-on experience with leading firewall technologies like Fortinet, Cisco, Palo Alto, and Check Point is necessary. Familiarity with VPNs, WAF, Proxy, SIEM, IDS/IPS, and endpoint security controls is expected.

Basic understanding of cloud security principles in AWS/Azure environments is beneficial. Candidates should hold at least one OEM certification such as CCNA/CCNA Security, NSE 4+, PCNSA, or CCSA. Additional certifications like CEH, Security+, or ISO 27001 Lead Auditor/Implementer are advantageous. A Bachelor’s or Master’s degree in Information Security, Computer Science, or a related discipline is required.