Job Title:  T&T | Cyber: ES | Deputy Manager | Cloud Security | Gurugram

Job Description: Cloud Security

Are you interested in improving the cyber and organizational risk profiles of leading companies? Do you want to be involved in delivering cloud security services to leading companies?

If yes, then Deloitte’s Cyber Risk team could be the place for you! Transparency, innovation, collaboration, sustainability: these are the hallmark issues shaping cyber initiatives today. Deloitte’s Cyber Risk business is passionate about making an impact with lasting change. Delivering our industry leading services requires fresh thinking and a creative approach. We collaborate with teams from across our organization in order to bring the full breadth of Deloitte, its commercial and public sector expertise, to best support our clients. Our aspiration is to be the premier integrated services provider in helping to transform the cyber security services marketplace.

Our team is client focused and mission driven. As a cloud security consultant/assistant manager in Deloitte's Cyber Risk Services, you’ll work with our diverse teams of passionate professionals to help solve for some of today’s toughest cybersecurity challenges to enable or clients to achieve business growth and manage risk. 

Work you’ll do

·      Work independently to lead and complete high quality threat-based risk assessments, business impact analysis across a diverse set of cloud technologies, business functions, and platforms.

·      Conduct cloud infrastructure security risk assessments based on cloud security best practices.

·      Assess cloud security architecture

·      Cloud security controls evaluation to ensure compliance with business scope, security policies and standards

·      Preparing cloud infrastructure risk assessment reports.

·      Work closely with internal management/team and client business representatives to scope assessments, gather documentation, interview clients, identify risks, document findings, and ensure transparent assessment of risks by following a structured risk assessment methodology.

·      Driving the efforts to identify, assess, and communicate the cloud information security risks to relevant-internal and external stakeholders.

Skills Required:

·      Strong understanding of cloud technologies and platforms: Azure/AWS/GCP/OCI

·      Understanding of cloud security architecture

·      Understanding of Zero trust principle, security technologies and controls:

AWS/Azure/GCP/OCI cloud native security controls, Identity Access Management, Data Security, IDS/IPS, SIEM, web application firewall, cryptography, Kubernetes, container security etc.

·      Should have conducted cloud security assessments and configuration reviews as per industry best practices

·      Familiarity with industry-leading standards and frameworks such as ISO 27001, NIST, CSA CCM, CIS benchmarks to help clients adhere to compliance requirements

·      Knowledge and experience of Risk Management Lifecycle (Risk Identification, Risk Assessment, Risk Response, & Reporting)

·      Experience with cloud security tools and services

·      Knowledge and experience in developing/creating cloud security policies and frameworks for organizations

·      Effective written and communication skills

·      Strong sense of ownership, urgency, and drive

·      Demonstrate teamwork and collaborate with other teams to ensure client’s cloud environment is secure

Qualifications/Experience:

·      Bachelor’s degree preferred in Computer Science, Information Security, Information Technology, Engineering

·      Cloud security certifications – CCSK/CCSP, AWS/Azure/GCP

·      6-9 years of working experience in Cyber Security Consulting with proficiency in cloud security assessment

·      Should have played a role in client engagements

Preferred:

·      Certifications: CCSK/CCSP, Azure/AWS/GCP certifications