Summary

Position Summary To work in the innovative and creative CISO Team, a world-class operation renowned for its extensive expertise and experience. Collaborate with both business and technical teams to drive change and exert influence across the entire Deloitte landscape. Utilize your skills to effect real-world impact.

As a Cybersecurity GRC Analyst, you will be responsible for monitoring, managing, supporting and closing compliance issues while also support the team with GRC deliverables such as risk assessments, policy and standard oversight and support, metrics and reporting, audit support, etc.

Work you'll do

As a Cybersecurity GRC on the CISO team, you will be responsible for:

- Supporting deployment of cybersecurity strategy by collaborating across Cybersecurity, risk, control, and business teams
- Conducting security control reviews, risk assessments, and control issue tracking to support compliance and governance activities
- Maintaining risk registers, policy exception workflows, metrics dashboards, and management reporting for leadership and governance forums
- Partnering with UK and global Cybersecurity, Business Security, IT Services, and compliance stakeholders on risk and control initiatives
- Supporting audit requests, policy and standards oversight, process documentation, and continuous improvement across the GRC function

The team At Deloitte, we’re all about collaboration. And nowhere is this more apparent than among our 2,000-strong internal services team. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas

- Human Resources, Clients &
- Industries, Finance &
- Legal, Practice Support Services, Quality &
- Risk Services, IT Services, and Workplace Services &
- Real Estate, together we live, breathe and deliver the Deloitte experience.

Location: Hyderabad

Shift Timings: 02:00 PM to 11:00 PM

Qualifications

Required





- Full-time bachelor’s degree in Computer Science, Information Security, Engineering, or another discipline
- Experience in information security, governance, risk, and compliance, or risk management
- Experience conducting risk assessments, impact assessments, control reviews, and policy or standards updates
- Knowledge of cybersecurity and information assurance frameworks including National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), International Organization for Standardization 27001 (ISO 27001), and Control Objectives for Information and Related Technologies (COBIT)
- Experience with governance, risk, and compliance tools such as Archer or ServiceNow GRC
- Experience developing security metrics, key performance indicators, key risk indicators, and management reporting
- Experience supporting audit activities, risk registers, and security governance processes

Preferred
- 6+ years of experience in governance, risk, and compliance work with risk and control responsibilities
- Experience developing information risk management and assurance approaches
- Experience developing cybersecurity risk management frameworks and methodologies
- Industry certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC)
- Experience with Information Technology Infrastructure Library version 4 (ITIL v4) service management practices
- Experience communicating cybersecurity risk and control concepts to technical and non-technical stakeholders

Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte,



purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people.

Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a outstanding organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits.

Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 362485

📌 Cybersecurity GRC-- Hyderabad
🏢 Deloitte
📍 Hyderabad