Deputy Manager | NIST Implementation | Bengaluru | Cyber Strategy & Transformation

• Job requisition ID : 108851 

• Location: Bengaluru

• Entity: Deloitte Touche Tohmatsu India LLP 

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity 

Your work profile 

ISMS or Third-Party Risk Assessments.  

Ability to effectively liaise with clients and manage stakeholder expectations.  

Work with client teams from various depts. Such as compliance teams, auditing and regulators to identify and document various requirements/obligations  

Conducting risk assessments and audits with respect to people, process and technology  

Identification of gaps/observations, risks, opportunities and improvement of policies, processes, procedures and standards  

Documenting information security risk, recommendation and compensating controls in the form of assessment/audit reports 

Key skills required    

Understanding of Third party/vendor/supplier risk management considerations  

Knowledge of Data Protection & Privacy related risks associated with Third-Party and relevant control frameworks for Third party risk management  

Excellent written/verbal communication  

Excellent documentation and presentation skills  

Highly motivated and willing to work in local and global environments  

Bachelor's degree in computer science, Information Technology or related field.  

Relevant experience of 4+ years in IT Audits, Cloud security 

Cyber TPRM experience ranging from 1 year to 7yrs is mandatory.   

Experience with ISO22301 implementation and audits  

Preferred certifications CBCI / CBCP / ISO22301 LI or LA Offensive Security Certified Professional, CISA to work in a cross-functional, cross-cultural matrix environment\ 

Security certifications like CISSP, CISA, CISM, CEH, ISO27001  

Work experience in Infrastructure / Application Security  

Work experience in IT Audit  

Work experience in Information Risk Management