Join Deloitte's dynamic Cyber: ES team as a Deputy Manager, specializing in Cloud Security. You will be instrumental in helping organizations fortify their defenses against cyber threats and protect critical assets. Our approach emphasizes security, vigilance, and resilience, aiming to not only prevent and respond to attacks but also to strategically manage cyber risk for new opportunities.

We integrate cyber risk management into strategy development, ensuring effective oversight of information and technology risks. Learn more about our Cybersecurity services and how you can contribute to a more secure digital future.

As a Deputy Manager in our Cyber: ES Team, your role involves fostering strong client and team relationships to surpass expectations. You will independently lead high-quality threat-based risk assessments and business impact analyses across various cloud technologies, business functions, and platforms.

Key responsibilities include conducting cloud infrastructure security risk assessments aligned with best practices, evaluating cloud security architecture, and assessing cloud security controls for compliance with business scope, security policies, and standards. You will also be responsible for preparing comprehensive cloud infrastructure risk assessment reports and collaborating with internal management and client representatives to define assessment scopes, gather data, interview stakeholders, document findings, and ensure a structured risk assessment process.

Driving the identification, assessment, and communication of cloud information security risks to both internal and external stakeholders will be a core part of your contribution.

We are seeking a candidate with over 6 years of experience in Cyber Security Consulting, demonstrating proficiency in cloud security assessment. A robust understanding of major cloud technologies and platforms such as Azure, AWS, GCP, and OCI is essential.

Familiarity with cloud security architecture, Zero Trust principles, and a range of security technologies and controls is required. This includes experience with cloud-native security controls, Identity Access Management, Data Security, IDS/IPS, SIEM, web application firewalls, cryptography, Kubernetes, and container security.

Candidates should possess experience conducting cloud security assessments and configuration reviews based on industry best practices. Knowledge of industry standards and frameworks like ISO 27001, NIST, CSA CCM, and CIS benchmarks is crucial for assisting clients with compliance. Experience with the Risk Management Lifecycle and cloud security tools is also necessary. Experience in developing cloud security policies and frameworks is a plus, as are cloud security certifications.