Job Title:  Deputy Manager | Risk Management | Mumbai | Cyber Strategy & Transformation

The team 

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks 

Your work profile 

As a part of our Cyber strategy team, you will build and nurture positive working relationships with teams and clients with the intention to exceed client expectations. 

The candidate will support the delivery of privacy and vendor risk consulting engagements, assist clients in implementing privacy and risk management frameworks, and contribute to compliance with applicable regulatory and industry standards.

The ideal candidate should possess a good understanding of data privacy principles, third-party risk management processes, and governance, risk, and compliance (GRC) concepts, along with strong analytical and communication skills.

Required Key Skills:

• Professional certifications such as CEH, ISO 27001 
• Independently manage third-party risk assessments for vendors across banking, financial services, and non-banking industries, supporting the evaluation of vendor risk and information security controls.
  Manage vendor onboarding and due diligence activities in line with applicable third-party risk management processes and requirements for material and critical vendors.
  Review vendor assessment questionnaires (VAQs) and evaluate vendor responses against relevant information security and risk management controls.
  Review and validate supporting evidence submitted by vendors to assess the
  implementation and effectiveness of applicable security controls, based on assessment
  requirements.
  Conduct information security control assessments across access control, data protection and privacy, vulnerability
  management, incident management, encryption and key management, network security, asset management, change
• Data Centre Audit 
• Data Privacy 
• TPRM
• B. E/ B-Tech (Tier 1/2) or MCA.