Summary

Position Summary

Do you have the drive to engage in cyber security risk & compliance to protect organizations from potential security exposures or threats If your answer is yes, we have the right opportunity for you!

Work you'll do

As an Assistant Manager, GRC- Cyber Program Design and Governance on the Cyber Security team, you will be responsible for:

Executing vendor information security risk assessments aligned to Deloitte's governance, risk, and compliance objectives
Reviewing vendor security programs, processes, and controls to identify risks to Deloitte data, systems, networks, and facilities
Documenting assessment results, communicating findings to stakeholders, and tracking remediation plans through closure
Collaborating with vendors, internal business stakeholders, subject matter specialists, and Cyber Security leadership across onshore and offshore teams
Supporting vendor policy compliance activities and cyber security awareness initiatives across the organization

The team

Deloitte Technology team helps power Deloitte's success. Deloitte Technology team is the engine that helps to drive Deloitte, which serves many of the world's largest organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.

The 3,000 professionals in Deloitte Technology deliver services internally including:

Cyber security
Technology support
Technology & Infrastructure
Application development and management
Relationship management group
Strategy
Deployment
PMO
Financials

Cyber Security

Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.

Areas of Risk & Compliance focus include:

Client ODCs
Security Contract Reviews
Vendor Assessments
Security Awareness
Audits & Assessments

Location: Hyderabad

Shift Timings: Indian Standard Time

Qualifications

Required:

Bachelor's degree in Computer Science, Business Administration, or equivalent educational or professional experience
6-9 years of experience in information security, technology risk, governance, risk, and compliance, vendor risk management, audit, controls testing, risk assessment, or remediation management
Experience reviewing third-party or vendor information security programs, processes, and controls
Experience with control frameworks and regulatory standards, including Service Organization Control 2 (SOC 2), International Organization for Standardization 27001 (ISO 27001), National Institute of Standards and Technology 800-53 (NIST 800-53), Public Company Accounting Oversight Board (PCAOB), or Cloud Security Alliance (CSA)
Experience with Governance, Risk & Compliance (GRC) tools
Experience preparing assessment reports, findings, and remediation tracking for stakeholders
Experience assessing security controls for cloud services

Preferred:

Experience implementing information security programs
Experience conducting information security audits or assessments
Experience supporting vendor remediation management activities
Industry certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), ISO 27001, ISO 27002, or ISO 22301

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 355756

Assistant Manager, GRC- Cyber Program Design and Governance- Hyderabad