As an Assistant Manager, Cybersecurity Architecture focused on Secure System Development Lifecycle (SSDLC) and Release Governance, you will help embed security into Deloitte Global’s design, build, and release processes. This hands-on role supports secure development governance and assurance while advancing automation capabilities that apply security controls consistently before release. You will also contribute to the evolution of policy-as-code and AI-assisted ways of working that strengthen security, scalability, and operational efficiency across the software development lifecycle.

Work you'll do

As an Assistant Manager, Cybersecurity Architecture on the Deloitte Global Cybersecurity team, you will be responsible for:

- Support and continually improve day-to-day SSDLC governance and assurance activities, including maintaining security requirements, controls, policies, standards, procedures, and supporting guidance.
- Serve as a subject matter resource for SSDLC assessments by providing practical guidance to assessors and delivery teams, identifying control gaps, exceptions, and non-compliance, and supporting remediation through resolution.
- Operate and enhance the Secure Release Framework by translating written security requirements into codified, testable policies and expanding automated control coverage over time.
- Support the integration of security checks and release gates into continuous integration/continuous deployment pipelines, working with engineering teams to promote reliable, scalable, and low-friction adoption.
- Apply AI tooling to support control mappings, release-gate policies, evidence generation, standards interpretation, and AI-assisted standards search capabilities at scale.
- Use ServiceNow to track assessments, exceptions, and risk; produce reporting on program performance, compliance posture, and control effectiveness; and support security risk assessments, risk acceptance documentation, and stakeholder enablement activities.

The team

This team helps strengthen secure development practices across Deloitte Global by embedding cybersecurity requirements into the software delivery lifecycle. Working across governance, risk, compliance, architecture, and engineering stakeholders, the team focuses on building practical, scalable approaches to security assurance. The group is also advancing automation and policy-as-code capabilities to improve control consistency, streamline release governance,



and support secure adoption of emerging technologies.

Location: Hyderabad

Shift Timings: 11 AM to 8 PM

Qualifications

Required:

- 6+ years of experience in cybersecurity, application security, software security, information technology risk, or security governance
- Experience with software development lifecycle, Agile delivery practices, and continuous integration/continuous deployment concepts
- Experience with secure development principles and application security risks, including Open Worldwide Application Security Project Top 10 guidance
- Experience with security testing approaches, including static application security testing, dynamic application security testing, software composition analysis, and vulnerability management
- Experience working with configuration, code, and policy-as-code concepts in support of security automation
- Experience using artificial intelligence tooling to support technical, governance, or documentation-related work products
- Bachelor’s degree in computer science, engineering, or a technical or security discipline; or a security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, or Associate of ISC2

Preferred:

- Experience with policy-as-code tools such as Open Policy Agent/Rego and implementing security gates in continuous integration/continuous deployment pipelines
- Experience with GitHub, Azure DevOps, Snyk, ServiceNow, or comparable governance, risk, and compliance and workflow platforms
- Experience with scripting languages such as Python or PowerShell
- Experience with secure development frameworks such as National Institute of Standards and Technology Secure Software Development Framework, Open Worldwide Application Security Project Software Assurance Maturity Model, Open Worldwide Application Security Project Application Security Verification Standard, or Microsoft Security Development Lifecycle
- Experience with software supply chain security concepts, including software bill of materials and Supply-chain Levels for Software Artifacts




- Experience with artificial intelligence security and governance frameworks, cloud-native development environments, or certifications such as CSSLP, GSEC, Azure AZ-500, AWS Security, CISSP, or CCSP

#CA-NRP

Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize qualified growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India.

Benefits to help you thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 361028

📌 SSDLC & Release Governance - Assistant Manager (Hyderabad)
🏢 Deloitte
📍 Hyderabad