Job Title:  Deputy Manager | IT Audits | Bengaluru | Cyber Strategy & Transformation

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity 

Your work profile

• Develop and maintain a thorough understanding of IT controls frameworks and relevant regulations (e.g., SOX).
• Participate in risk assessments to identify IT control deficiencies and prioritize testing activities.
• Independently design and execute test plans for ITGCs and ITACs, utilizing a variety of testing methodologies.
• Working knowledge in one or more domains such as: Governance policies and procedures, Risk Management, Compliance, Access Control, Security Incident Response, Disaster Recovery, Business continuity management, Identity Access Review, Change Management
• Sound understanding of security technologies/techniques like Cryptography, Algorithms, Secure IT Authentication, Secure Development, Data Protection, Certificate Management Lifecycle
• Perform complex test procedures using automated tools and manual techniques, documenting the results comprehensively.
• Analyze test findings, identify control weaknesses, and recommend remediation actions.
• Collaborate with IT and business process owners to address control deficiencies and implement corrective actions.
• Experience in performing vendor security reviews covering cyber security domains
• Lead and mentor junior team members in control testing practices.
• Stay updated on emerging IT threats and control best practices.

Key skills required: 

• Bachelor’s degree in information technology, Computer Science, or a related field (or equivalent experience).
• 5-8 years of experience in IT audit, IT security, or a similar role with a focus on IT control testing.
• Strong working knowledge of IT controls frameworks and IT control testing methodologies.
• Familiarity with tools like ServiceNow, Archer, Jira, or other GRC platforms.
• Experience with IT control testing tools is a must.
• Experience in assessing and providing recommendations on the feasibility of automating manual control testing processes.
• Adaptability to manage a dynamic control population and evolving client needs.
• Excellent analytical and problem-solving skills.