Job Title:  Consultant | Third Party Risk Management | Delhi | Cyber Strategy & Transformation

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your work profile 

• ISMS or Third-Party Risk Assessments.  
• Ability to effectively liaise with clients and manage stakeholder expectations.  
• Work with client teams from various depts. Such as compliance teams, auditing and regulators to identify and document various requirements/obligations  
• Conducting risk assessments and audits with respect to people, process and technology  
• Identification of gaps/observations, risks, opportunities and improvement of policies, processes, procedures and standards  
• Documenting information security risk, recommendation and compensating controls in the form of assessment/audit reports 

Key skills required  

• Understanding of Third party/vendor/supplier risk management considerations  
• Knowledge of Data Protection & Privacy related risks associated with Third-Party and relevant control frameworks for Third party risk management  
• Excellent written/verbal communication  
• Excellent documentation and presentation skills  
• Highly motivated and willing to work in local and global environments 
• Bachelor's degree in computer science, Information Technology or related field.  
• Relevant experience of 2+ years in IT Audits, Cloud security 
• Cyber TPRM experience ranging from 1 year to 7yrs is mandatory.  
• Experience with ISO22301 implementation and audits  
• Preferred certifications CBCI / CBCP / ISO22301 LI or LA Offensive Security Certified Professional, CISA to work in a cross-functional, cross-cultural matrix environment\ 
• Security certifications like CEH, ISO27001  
• Work experience in Infrastructure / Application Security  
• Work experience in IT Audit  
• Work experience in Information Risk Management 
• Base location: Delhi/Gurgaon 
• This profile involves frequent travelling to client locations.  
• Inspiring - Leading with integrity to build inclusion and motivation   
• Committed to creating purpose - Creating a sense of vision and purpose   
• Agile - Achieving high-quality results through collaboration and Team unity   
• Skilled at building diverse capability - Developing diverse capabilities for the future   
• Persuasive / Influencing - Persuading and influencing stakeholders   
• Collaborating - Partnering to build new solutions   
• Delivering value - Showing commercial acumen   
• Committed to expanding business - Leveraging new business opportunities   
• Analytical Acumen - Leveraging data to recommend impactful approach and solutions through the power of analysis and visualization   
• Effective communication – Must be well abled to have well-structured and well-articulated conversations to achieve win-win possibilities   
• Engagement Management / Delivery Excellence - Effectively managing engagement(s) to ensure timely and proactive execution as well as course correction for the success of engagement(s)   
• Managing change - Responding to changing environment with resilience   
• Managing Quality & Risk - Delivering high quality results and mitigating risks with utmost integrity and precision   
• Strategic Thinking & Problem Solving - Applying strategic mindset to solve business issues and complex problems   
• Tech Savvy - Leveraging ethical technology practices to deliver high impact for clients and for Deloitte.  
• Empathetic leadership and inclusivity - creating a safe and thriving environment where everyone's valued for who they are, use empathy to understand others to adapt our behaviours and attitudes to become more inclusive.