Jobs / Deloitte / EA - IT - Information Security (CISSP) - Manager - Mumbai

EA - IT - Information Security (CISSP) - Manager - Mumbai

Deloitte · ✓ Verified company
📍 Mumbai, India · Hybrid · Full-time

About the role

EA - IT - Information Security (CISSP) - Manager - Mumbai • Job requisition ID : 110114  • Location: Mumbai • Entity: Deloitte Shared Services India LLP  The team   The Enabling Areas – Information Technology team is responsible for building & maintaining different applications for Deloitte that focuses on providing employee experience. Your work profile   -  Manage client security assessments and due diligence responses. - Manage security requirements in customer contracts and agreements. - Maintain information security policies, standards, and governance. - Ensure compliance with ISO 27001, NIST, privacy, and regulatory requirements. - Manage vulnerability management, penetration testing, and remediation programs. - Manage cybersecurity incidents, investigations, recovery, and reporting. - Conduct security architecture reviews. - Oversee cloud and infrastructure security controls and posture. - Collaborate with technology teams to identify and mitigate cyber risks. - Maintain audit evidence, security documentation, and compliance records. - Deliver security awareness, cyber resilience, and training programs. - Monitor security metrics, risks, incidents, and compliance status.   Skills Required   - 8-12 years of experience in Information Security, Cyber Security. - Preferred certifications: CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor/Implementer. - Experience in MSA review, client security questionnaires. - Experience in Information Security, Cybersecurity, Risk, or Governance. - Strong knowledge of ISO 27001, NIST, vulnerability management, and incident response. - Experience in cloud security, security architecture, threat modeling, IAM, and security operations. - Understanding of privacy, third-party risk, and audit requirements. - Knowledge of AI security, Generative AI governance, and technology risk management. - Ability to independently manage multiple security initiatives and deliver within timelines. - Experience in working in MNCs preferred - Bachelor’s degree in information technology, Computer Science, or a related field. Location and way of working - Base location: Mumbai, Delhi, Pune, Bengaluru preferred. - This profile may involve travel for work. - Hybrid is our default way of working.