Join Deloitte Touche Tohmatsu India LLP in Pune as a Deputy Manager, Cloud Security Architect. This senior role focuses on preventing, monitoring, and responding to cybersecurity threats and data breaches. You will be instrumental in ensuring Information Security directives align with client policies within the Technology Infrastructure.

Deloitte empowers organizations to proactively defend against cyberattacks and safeguard critical assets. We advocate for a secure, vigilant, and resilient approach, integrating cyber risk management into strategic development to unlock new opportunities. Understand how to embed cyber risk early for effective management of information and technology risks by exploring our Cybersecurity services.

This position drives the prevention, monitoring, and response to information/data breaches and cyber-attacks. You will ensure the execution of Information Security directives and activities, aligning with client information and cybersecurity policies within the Technology Infrastructure.

Key responsibilities include identifying opportunities for automation and standardization of security controls, resolving detected vulnerabilities in applications or infrastructure, and analyzing source code to mitigate weaknesses. You will also review automated testing results, prioritize corrective actions based on risk, and scan/analyze applications using automated tools, performing manual testing when necessary. Reducing risk by analyzing root causes, impact, and corrective actions is crucial. This role also involves directing the development and delivery of secure solutions, contributing to the IT architecture vision, and ensuring system architectures adhere to corporate policies and best practices. Risk identification, assessment, and mitigation, including identifying compensating controls for non-compliant items, are core functions.

We seek a professional with a minimum of 2 years of experience securing cloud environments, particularly AWS and GCP. A Bachelor's degree or Master's in Computer Science or Cybersecurity, or equivalent work experience, is required. Strong understanding of cloud security architectures, such as the AWS Well-Architected Framework and Google Cloud Security Command Centre, is essential. Familiarity with AWS and GCP Identity and Access Management (IAM) security models, along with in-depth knowledge of cloud infrastructure and architecture (e.g., VPC, EC2, S3, Cloud Storage, Compute Engine), is necessary.

Expertise in compliance and risk frameworks like NIST, ISO 27001, and CSA STAR is expected. Experience in business engagement for Information Security, Risk, Control & Compliance, IT Analysis/Design, or Program/Project Management is valuable. Proficiency in performing Information Security risk assessments and familiarity with Information Security Risk Governance are also key. Familiarity with Infrastructure as Code (IaC) security tools like Terraform and CloudFormation is required, along with advanced proficiency in Microsoft Office tools. Excellent communication skills, problem-solving abilities, and proven influencing and relationship management skills are important. Industry certifications such as CISSP, CISM, or CCSP are desired, and Public Cloud Solution Architect or Security Certifications (e.g., AWS Certified Solution Architect, GCP Professional Cloud Security Engineer) are a plus.