Join a leading cybersecurity team at Deloitte Touche Tohmatsu India LLP, focused on building resilience and managing cyber risk. We empower organizations to prevent attacks and protect critical assets, integrating security into strategic development for effective technology risk management. Explore the world of Cybersecurity with us and unleash new opportunities while staying secure, vigilant, and resilient.

This role is based in Delhi, India, and is a full-time onsite position.

Shape the cybersecurity landscape by building and governing technology-specific Minimum Security Baselines (MSBs). You will develop tailored MSBs using leading frameworks like NIST CSF and MITRE ATT&CK, translating complex threats into actionable security controls. Collaborate with cross-functional teams to finalize these baselines and leverage Open Policy Agent for policy development and testing.

Key responsibilities include maintaining traceability between threats, controls, and compliance results, validating findings, and managing MSB adoption, exceptions, and remediation governance. You'll also oversee dashboards and project KPIs to ensure effective cybersecurity posture.

A minimum of 8 years of experience in Minimum Security Baseline development and governance is essential. You should possess a strong understanding of cloud, API, infrastructure, identity, and application security controls, coupled with hands-on experience in Open Policy Agent and Rego development for Policy-as-Code.

Proficiency in mapping MITRE ATT&CK techniques to security controls and the ability to define measurable control requirements are critical. Experience with version control, peer review, exception management, and policy lifecycle governance is also required. Excellent stakeholder management, governance, dashboarding, and reporting skills are necessary. An educational background with a B.E./B.Tech. or MCA in Computer Science from a reputable university is expected.