The team
The Enabling Areas – Information Technology team is responsible for building & maintaining different applications for Deloitte that focuses on providing employee experience.
Your work profile
- Manage client security assessments and due diligence responses.
- Manage security requirements in customer contracts and agreements.
- Maintain information security policies, standards, and governance.
- Ensure compliance with ISO 27001, NIST, privacy, and regulatory requirements.
- Manage vulnerability management, penetration testing, and remediation programs.
- Manage cybersecurity incidents, investigations, recovery, and reporting.
- Conduct security architecture reviews.
- Oversee cloud and infrastructure security controls and posture.
- Collaborate with technology teams to identify and mitigate cyber risks.
- Maintain audit evidence, security documentation, and compliance records.
- Deliver security awareness, cyber resilience, and training programs.
- Monitor security metrics, risks, incidents, and compliance status.
Skills Required
- 8-12 years of experience in Information Security, Cyber Security.
- Preferred certifications: CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor/Implementer.
- Experience in MSA review, client security questionnaires.
- Experience in Information Security, Cybersecurity, Risk, or Governance.
- Strong knowledge of ISO 27001, NIST, vulnerability management, and incident response.
- Experience in cloud security, security architecture, threat modeling, IAM, and security operations.
- Understanding of privacy, third-party risk, and audit requirements.
- Knowledge of AI security, Generative AI governance, and technology risk management.
- Ability to independently manage multiple security initiatives and deliver within timelines.
- Experience in working in MNCs preferred
- Bachelor’s degree in information technology, Computer Science, or a related field.
Location and way of working
- Base location: Mumbai, Delhi, Pune, Bengaluru preferred.
- This profile may involve travel for work.
- Hybrid is our default way of working.