T&T | Assistant Manager | CISA | Mumbai | Cyber Strategy & Transformation

The Team

• Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your Work Profile

• Manage relationships with CISOs, CIOs, senior management, business teams, auditors, and third parties to drive cybersecurity initiatives.

• Implement and maintain ISO/IEC 27001:2022-aligned ISMS and GRC frameworks, including risk assessments, control mapping, policies, and audit readiness.

• Conduct cybersecurity risk, control, and maturity assessments; maintain risk registers and drive remediation activities.

• Coordinate internal and external audits, including evidence collection, control validation, findings management, and closure.

• Perform Third-Party Risk Assessments (TPRA) and cybersecurity due diligence for vendors, clients, and partners.

• Develop and review Information Security Policies, Standards, Processes, and Procedures in line with regulatory and contractual requirements.

• Support Business Continuity Management Systems (BCMS), cyber resilience, security awareness, and governance initiatives.

• Prepare CISO and management reports, risk dashboards, audit updates, security posture reports, and remediation status.

• Maintain working knowledge of Security Operations, VAPT, Vulnerability Management, DLP, SIEM/SOAR, MITRE ATT&CK, Microsoft Defender, Entra ID, and Intune to support risk and governance reporting.

Key Required Skills:

• Experience in Cybersecurity Governance, Risk & Compliance (GRC) and Information Security Management.

• Knowledge of ISO/IEC 27001:2022, ISMS implementation, risk management, and security controls.

• Hands-on experience in audit coordination, third-party risk assessments, policy development, and remediation tracking.

• Strong stakeholder management, documentation, communication, and reporting skills.

• Understanding of cybersecurity technologies and security operations.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.