Job Description

The team

n

The Enabling Areas – Information Technology team is responsible for building & maintaining different applications for Deloitte that focuses on providing employee experience.

n

Your work profile

n

n
- Manage client security assessments and due diligence responses.
n
- Manage security requirements in customer contracts and agreements.
n
- Maintain information security policies, standards, and governance.
n
- Ensure compliance with ISO 27001, NIST, privacy, and regulatory requirements.
n
- Manage vulnerability management, penetration testing, and remediation programs.
n
- Manage cybersecurity incidents, investigations, recovery, and reporting.
n
- Conduct security architecture reviews.
n
- Oversee cloud and infrastructure security controls and posture.
n
- Collaborate with technology teams to identify and mitigate cyber risks.
n
- Maintain audit evidence, security documentation, and compliance records.
n
- Deliver security awareness, cyber resilience, and training programs.
n
- Monitor security metrics, risks, incidents, and compliance status.
n

n

Skills Required

n

n
- 8-12 years of experience in Information Security,



Cyber Security.
n
- Preferred certifications: CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor/Implementer.
n
- Experience in MSA review, client security questionnaires.
n
- Experience in Information Security, Cybersecurity, Risk, or Governance.
n
- Robust knowledge of ISO 27001, NIST, vulnerability management, and incident response.
n
- Experience in cloud security, security architecture, threat modeling, IAM, and security operations.
n
- Understanding of privacy, third-party risk, and audit requirements.
n
- Knowledge of AI security, Generative AI governance, and technology risk management.
n
- Ability to independently manage multiple security initiatives and deliver within timelines.
n
- Experience in working in MNCs preferred
n
- Bachelor's degree in information technology, Computer Science, or a related field.
n

n

Location and way of working

n

n
- Base location: Mumbai, Delhi, Pune, Bengaluru preferred.
n
- This profile may involve travel for work.
n
- Hybrid is our default way of working.
n

📌 Information Security Manager (CISSP) (Mumbai)
🏢 Deloitte
📍 Mumbai