Job Title:  T&T | Cyber: D&R | Manager | Third Party Risk Management | Pune

The team  

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about  Cybersecurity 

Your work profile

• Lead end-to-end Third-Party Risk Management engagements.
• Act as the TPRM SME and provide framework guidance.
• Manage client discussions, workshops, and risk reviews.
• Develop and oversee risk scoring models and dashboards.
• Drive remediation planning and risk mitigation activities.
• Support proposals, RFP responses, and client presentations.
• Lead the use of TPRM tools such as ServiceNow, Archer, and ProcessUnity.
• Ensure compliance with DORA, FedRAMP, and other regulatory requirements.
• Oversee privacy risk assessments for third-party engagements.
• Manage ITGC, PCI DSS, and third-party control testing activities.
• Review risk assessment results and provide executive-level reporting.
• Mentor team members and ensure high-quality project delivery.

Required Skills

·           Deep expertise in third-party risk management, IT security, and compliance.

·           Experience with ISO 27001, NIST, GDPR, and other regulatory standards.

·           Strong stakeholder management and leadership capabilities.

·           Certifications such as CISA, CISSP, ISO 22301 LA, are highly desirable.

·           Experience with control testing methodologies including ITGC and PCI DSS.

·           Familiarity with regulatory standards such as DORA and FEDRAMP.

·           Hands-on experience with tools used in third-party risk management.

·           Knowledge of privacy frameworks and data protection requirements.

·           Strong analytical, communication, and stakeholder management skills

Qualification/ Background:

·       B. E / B-Tech (Tier 1/2) or master’s degree in information security, Computer Science, or a related field

·       7 - 10 years of relevant experience in cybersecurity consulting, risk management, and compliance.

·       In-depth knowledge of security frameworks and standards (e.g., NIST, ISO 27001, COBIT).

 Location and way of working

·       Base location: Pune

·       Professional is required to work from office.