Senior Executive ISO27001 Mumbai Cyber Strategy & Transformation
Deloitte India (South Asia) · Consulting & Professional Services
- Mumbai, India
- On-site
- Posted today
- Apply by 1 Jan 2027
- Cybersecurity
About the job
The team
Technology & Transformation is about much more than just the numbers. It’s about attesting to accomplishments and challenges and helping to assure strong foundations for future aspirations. Deloitte exemplifies what, how, and why of change so you’re always ready to act ahead. Learn more about Technology & Transformation Practice
Your work profile
As an Analyst in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: -
ISMS or Third-Party Risk Assessments.
Ability to effectively liaise with clients and manage stakeholder expectations.
Work with client teams from various depts. Such as compliance teams, auditing and regulators to identify and document various requirements/obligations
Conducting risk assessments and audits with respect to people, process and technology
Identification of gaps/observations, risks, opportunities and improvement of policies, processes, procedures and standards
Documenting information security risk, recommendation and compensating controls in the form of assessment/audit reports
Key Skills Required:
Understanding of Third party/vendor/supplier risk management considerations
Knowledge of Data Protection & Privacy related risks associated with Third-Party and relevant control frameworks for Third party risk management
Excellent written/verbal communication
Excellent documentation and presentation skills
Highly motivated and willing to work in local and global environments
Bachelor's degree in computer science, Information Technology or related field.
Relevant experience of 1+ years in IT Audits, Cloud security
Cyber TPRM experience ranging from 1 year to 7yrs is mandatory.
Experience with ISO22301 implementation and audits
Preferred certifications CBCI / CBCP / ISO22301 LI or LA Offensive Security Certified Professional, CISA to work in a cross-functional, cross-cultural matrix environment\
Security certifications like CISSP, CISA, CISM, CEH, ISO27001
Work experience in Infrastructure / Application Security
Work experience in IT Audit
Work experience in Information Risk Management