Job Title:  Assistant Manager | ISO:27001 | Mumbai | Cyber Strategy & Transformation

 T&T – Cyber: CST | Business Continuity & Disaster Recovery (BCP/DR) | Gurgaon

The Team  

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity  

Your Work Profile 

As a Deputy Manager within the Cyber Strategy & Transformation team, you will lead and manage cybersecurity consulting engagements focused on cyber risk management, governance, compliance, and transformation initiatives. You will work closely with clients to identify and address cybersecurity risks, strengthen security posture, and deliver practical solutions aligned with business priorities and regulatory expectations. The role requires strong consulting capabilities, project management skills, and the ability to lead teams and manage stakeholder relationships. The role involves handling day-to-day operations, troubleshooting issues, onboarding accounts, and ensuring secure privileged access across the organization.

Key Responsibilities:

• Responsible for ISO 27001 based Information Security Management System implementation and sustenance  
• Assess client information security posture, identify the gaps/risks in the existing environment and develop solutions to mitigate the identified gaps/risk  
• Responsible for conducting clients vendors risk assessment and providing a holistic view of clients risk exposure due to outsourcing  
• Responsible for conducting Information Systems audits covering IT infrastructure assets  
• Works on projects with clearly defined guidelines as team member with responsibility for project delivery  
• Works under general supervision with few direct instructions  
• Performs development and customization work on larger security and privacy implementation projects  
• Understands basic business and information technology management processes.  
• Demonstrates knowledge of firm's methodologies, frameworks and tools.  
• 3-5 yrs of relevant work exp in Cyber security, Information Security, related domains.
• Bachelor of Technology or Engineering (IT,CS) OR Master Of Computer Application (MCA)
• ISO 27001 Lead Implementor
• Any other cyber certification will be added advantage (CISA / CISSP / CISM, etc)
• Strong communication skills (written & verbal)  
• Understanding of basic business and information technology management processes  
• Basic knowledge in one or more security and privacy domains such as: security governance policies and procedures, risk management, compliance, identity management, network security, security architecture, security incident response, disaster recovery, business continuity management, privacy and data protection