A The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilientnot only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash current opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your work profile

- Lead engagement teams in executing Cyber TPRM assessments, technology risk reviews, security audits, and advisory engagements across diverse client environments.

- Develop and enhance Cyber TPRM policies, procedures, SOPs, governance frameworks, operating models, and playbooks, including vendor lifecycle processes covering onboarding, due diligence, risk assessment, contracting, monitoring, renewal, and offboarding.

- Define and implement Cyber risk tiering methodologies, assessment criteria, escalation mechanisms, cyber risk quantification, exception management, and reporting structures aligned with regulatory expectations and industry best practices.

- Conduct technical control assessments across infrastructure, cloud environments, applications, databases, and network components, evaluating controls related to access management, encryption, logging and monitoring, vulnerability management, patch management, backup security, and incident response.

- Conduct control maturity assessments against leading frameworks including ISO/IEC 27001, NIST Cybersecurity Framework (CSF), NIST SP 800-53, CIS Controls, PCI DSS, ISO 22301, ISO 27701, COBIT, SOC 2,



and Cloud Security Alliance (CSA CCM).

- Assess third-party security posture against ISO 27001, NIST, PCI DSS, and other applicable cybersecurity frameworks, and support secure design reviews and technology risk evaluations for critical systems and outsourced services.

- Interpret and apply regulatory requirements related to outsourcing, information security, data protection, and operational resilience, ensuring alignment with client control environments and remediation initiatives.

- Perform quality reviews of engagement deliverables to ensure accuracy, completeness, and adherence to Deloitte quality standards.

- Support proposal preparation, RFP responses, solution development, and identification of new advisory opportunities, while guiding and mentoring team members during assessments, audits, and advisory engagements.

- Drive capability building initiatives by strengthening technical and process-oriented competencies and promoting AI-enabled Cyber GRC automation, analytics, and continuous monitoring capabilities within the team

Key skills required

- Bachelor's degree in Engineering, Computer Science, Information Technology, Cyber Security, or a related discipline. Master's degree (MBA/M.Tech/MS) is an added advantage.

- 6+ years of experience in Cyber Security, Third Party Risk Management, Technology Risk, IT Risk Consulting, or Information Security.

- Experience with ISO/IEC 27001 / ISO22301 / NIST CSF etc implementation and audits

- Preferred certifications ISO 27001 LA / ISO 42001 / ISO22301 LI or LA, CISA / CRISC / CRISP etc

📌 TPRM | DM | Delhi
🏢 Deloitte Shared Services India
📍 Delhi