T&T | Cyber: CST| Assistant Manager| Third Party Risk Management | Pune

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your work profile

Within the Cyber Risk team, you will support and deliver cybersecurity consulting engagements focused on risk management, governance, compliance, security assessments, and technology risk advisory. You will work closely with clients and internal teams to identify risks, strengthen security posture, drive remediation initiatives, and deliver value-driven cybersecurity solutions.

Key Required Skills

• Manage end-to-end third-party/vendor risk assessments, including onboarding and periodic reviews.

• Conduct due diligence covering information security, privacy, compliance, and operational risks.

• Perform inherent risk assessments and assign vendor risk ratings.

• Review SOC 2 reports, ISO 27001 certificates, security questionnaires, and penetration-testing reports.

• Identify control gaps and document risk findings, remediation plans, and mitigation requirements.

• Track remediation actions, exceptions, and risk acceptance through closure.

• Maintain vendor risk profiles, assessment records, and risk registers.

• Prepare TPRM dashboards and management reports on risk posture, overdue assessments, and open findings.

• B.E./B.Tech. or master’s degree in Business, Technology, Risk Management, or a related field..