Job Title:  T&T | Cyber:CST | Manager | ISO:27001 | Mumbai

The team 

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your work profile

• Subject matter specialist in GRC and multiple security domains
• Extensive experience in leveraging industry standards and frameworks such as ISO/IEC 17799, ISO/IEC 27001, COBIT, ITIL, etc.
• Establishing and maintaining risk governance frameworks, facilitating risk identification, evaluation, mitigation, and continuous monitoring
• Designing and validating secure IT and OT architectures, ensuring integration of application security principles throughout the software development lifecycle.
• Experience in design, development, and roll-out of security programs, developing IT risk management strategies, compliance programs.
• Overseeing third-party risk assessments and managing compliance with regulatory frameworks such as RBI, SEBI, IRDA, PCI DSS, and others.
• Advising on secure cloud architecture and best practices across AWS, Azure, and Google Cloud platforms, ensuring cloud environments meet compliance and security standards.
• Planning and executing IT and OT security audits alongside IT General Controls (ITGC) testing, identifying gaps, and collaborating with teams to remediate vulnerabilities.
• Assessing the organization’s cybersecurity maturity (using frameworks like NIST CSF) and developing strategic roadmaps to strengthen security posture over time.

 
Key Skills Required

• B. E/ B-Tech (Tier 1/2) or master’s degree in information security, Computer Science, or a related field
• Professional certifications such as CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI, ISO 31000 LA/LI, ISO 22301 LA/LI, CISA, ITIL or PCI QSA are preferred.
• 8-15 years of relevant experience in cybersecurity consulting, risk management, and compliance.
• In-depth knowledge of security frameworks and standards (e.g., NIST, ISO 27001, COBIT).