Position Summary The Assistant Manager, Cyber Engineering supports the day-to-day execution of a global, risk-based third-party cyber risk program within Deloitte Technology. This role is responsible for assessing, monitoring, and mitigating cyber risks introduced by vendors and third parties to ensure secure service delivery, protect client data, and enable strategic business initiatives. As an Assistant Manager, Cyber Engineering within the Vendor Cyber Risk Management Program, you will help identify and track vendor-related cyber risks, supporting timely analysis and follow-up to reduce the likelihood of disruptive incidents. You’ll work closely with both technical and non-technical stakeholders, providing the best possible support across a range of cybersecurity, risk, and risk mitigation disciplines. You will leverage AI and automation tools to streamline vendor cyber risk assessment activities, including evidence review, control mapping, risk identification, findings tracking, reporting, and workflow management to improve efficiency, consistency, and scalability of the VCRM program. Work you'll do As an Assistant Manager, Cyber Engineering on the Deloitte Technology team, you will be responsible for…
• Review vendor cyber risk assessments and identify key risks and gaps
• Communicate risks and status clearly to stakeholders, and support reporting to leadership
• Support vendor risk management (assessment, mitigation, and monitoring)
• Analyze vulnerabilities and explain risks in transparent, business terms
• Identity and document control gaps and business impacts
• Support the exception and risk acceptance process for non-compliant vendors
• Collaborate with VCRA, business, legal, procurement, and cyber teams across the vendor lifecycle
• Participate in governance forums (e.g., TPRM reviews, risk discussions) and escalate higher-risk issues to senior team members
• Maintain accurate, up-to-date records in ServiceNow for audit and tracking
• Identify opportunities to apply AI and intelligent automation across the vendor risk lifecycle to enhance assessment quality, accelerate risk analysis, improve stakeholder reporting, and reduce manual effort while maintaining appropriate governance and oversight.
• Support improvements to VCRM processes, workflows, and reporting, and help keep documentation up to date
• Track open findings and remediation tasks in ServiceNow against their due dates and SLAs; follow up on items approaching or past due and flag delays
• Review vendor-submitted evidence and artifacts (e.g., SOC 2 Type II, ISO 27001, penetration test reports)



to support findings analysis and closure
• Help prepare findings metrics and status reporting (open findings, ageing, SLA status) for periodic governance and leadership reviews The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Location:
Hyderabad Shift Timings: 11 AM to 8 PM Qualifications We value a diverse range of skills and experiences. While proficiency in all listed qualifications is strongly desired, we encourage candidates who may not meet every criteria to still apply, as we believe in the potential for unique perspectives and talents to contribute to our team. Required:
• Risk assessment and analytical thinking
• Clear written and verbal communication
• Ability to translate technical risks into business impact
• Stakeholder collaboration and coordination
• Attention to detail and documentation rigor
• Familiarity with governance processes (e.g., risk acceptance, exceptions, risk forums)
• Basic ability to read third-party assurance reports (e.g., SOC 2 Type II, ISO 27001) and recognize common security controls (e.g., MFA, encryption, access management, penetration testing)
• Comfort working in a ticketing or GRC platform (e.g., ServiceNow) to track and document work Preferred:
• Exposure to vendor risk assessments or audits
• Knowledge of regulatory and compliance requirements
• Experience using AI-powered tools and automation technologies to support cybersecurity, risk management, governance, or third-party risk processes, including data analysis, reporting, workflow automation, and decision support
• Experience with reporting and visualization tools (e.g., Power BI)
• Understanding of secure software development lifecycle (SSDLC)
• Familiarity with risk treatment concepts (remediation, risk acceptance, and exceptions) Education &

Experience:
• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or related field




• 2–5 years of experience in cybersecurity, IT risk, or third-party risk management
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, SOC 2)
• Basic understanding of application security, infrastructure security, and cloud environments
• Experience with tools such as ServiceNow or similar GRC platf Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work. Professional development At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India. Benefits to help you thrive At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones,

we offer
a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you. Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Requisition code: 373175 Assistant Manager, Cyber Engineering
- Hyderabad Hyderabad, Telangana, India

📌 Assistant Manager, Cyber Engineering (Hyderabad)
🏢 Deloitte
📍 Hyderabad