The team /n The Enabling Areas – Information Technology team is responsible for building & maintaining different applications for Deloitte that focuses on providing employee experience. /n Your work profile /n /n

- Manage client security assessments and due diligence responses.

/n

- Manage security requirements in customer contracts and agreements.

/n

- Maintain information security policies, standards, and governance.

/n

- Ensure compliance with ISO 27001, NIST, privacy, and regulatory requirements.

/n

- Manage vulnerability management, penetration testing, and remediation programs.

/n

- Manage cybersecurity incidents, investigations, recovery, and reporting.

/n

- Conduct security architecture reviews.

/n

- Oversee cloud and infrastructure security controls and posture.

/n

- Collaborate with technology teams to identify and mitigate cyber risks.

/n

- Maintain audit evidence, security documentation, and compliance records.

/n

- Deliver security awareness, cyber resilience, and training programs.

/n

- Monitor security metrics, risks, incidents, and compliance status.

/n /n Skills Required /n /n

- 8-12 years of experience in Information Security, Cyber Security.

/n





- Preferred certifications: CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor/Implementer.

/n

- Experience in MSA review, client security questionnaires.

/n

- Experience in Information Security, Cybersecurity, Risk, or Governance.

/n

- Robust knowledge of ISO 27001, NIST, vulnerability management, and incident response.

/n

- Experience in cloud security, security architecture, threat modeling, IAM, and security operations.

/n

- Understanding of privacy, third-party risk, and audit requirements.

/n

- Knowledge of AI security, Generative AI governance, and technology risk management.

/n

- Ability to independently manage multiple security initiatives and deliver within timelines.

/n

- Experience in working in MNCs preferred

/n

- Bachelor's degree in information technology, Computer Science, or a related field.

/n /n Location and way of working /n /n

- Base location: Mumbai, Delhi, Pune, Bengaluru preferred.

/n

- This profile may involve travel for work.

/n

- Hybrid is our default way of working.

/n

📌 Information Security Manager (CISSP) (Mumbai)
🏢 Deloitte
📍 Mumbai