T&T | Cyber: CST | Associate Director | CISSP | GRC | Gurgaon
•Job requisition ID : 115676
•Location : Hyderabad
•Entity : Deloitte Touche Tohmatsu India LLP
The Team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your Work Profile
We are seeking an experienced and strategic cybersecurity leader with 14+ years of expertise in enterprise security architecture, Security Operations Centre (SOC) transformation, Zero Trust implementation, cloud security, and regulatory compliance.
The ideal candidate will drive enterprise-wide cybersecurity strategy, strengthen security operations, lead digital security transformation initiatives, and implement scalable security solutions aligned with business objectives and industry best practices.
Key Skills Required
•Develop and execute enterprise-wide cybersecurity strategies and transformation roadmaps.
•Design and implement secure enterprise architectures aligned with business requirements.
•Lead Zero Trust architecture and security modernization initiatives.
•Provide strategic guidance on cybersecurity risks, emerging threats, and technology investments.
•Lead SOC transformation, SIEM modernization, and security operations optimization initiatives.
•Oversee threat detection, incident response, threat hunting, and vulnerability management programs.
•Implement security automation and AI-driven threat detection capabilities.
•Strengthen organizational cyber resilience through proactive security monitoring.
•Design and implement security solutions across cloud, hybrid, and enterprise environments.
•Demonstrate expertise in Microsoft security technologies, including Microsoft Sentinel, Defender XDR, Entra ID, and Microsoft Purview.
•Drive endpoint protection, identity security, data protection, and cloud security initiatives.
•Establish security baselines, configuration standards, and continuous security improvement programs.
•Establish and enhance cybersecurity governance, risk management, and compliance frameworks.
•Ensure alignment with NIST, ISO 27001, PCI DSS, HIPAA, and SOC 2 requirements, as applicable.
•Lead cybersecurity risk assessments, security control evaluations, and compliance improvement initiatives.
•Collaborate with internal stakeholders and auditors to strengthen security assurance.
•Lead, mentor, and develop high-performing cybersecurity teams.
•Engage with senior leadership, CISOs, CIOs, and business stakeholders to communicate security priorities and risk exposure.
•Manage cybersecurity transformation programs, delivery milestones, budgets, and technology partnerships.
•Drive cross-functional collaboration to embed security into enterprise digital transformation.
•14+ years of relevant experience in cybersecurity, information security, or enterprise security architecture.
•Strong experience in SOC/SIEM transformation, Zero Trust, threat hunting, and vulnerability management.
•Hands-on knowledge of Microsoft security technologies and cloud security architectures.
•Experience in endpoint security, identity and access management, data protection, and security automation.
•Strong understanding of NIST, PCI DSS, HIPAA, SOC 2, and ISO 27001 frameworks.
•Demonstrated experience leading complex cybersecurity transformation initiatives.
•Excellent stakeholder management, communication, team leadership, and strategic decision-making skills.
•Bachelor's or Master's degree in Computer Science, Information Security, Information Technology, or a related discipline.
•Professional certifications such as CISSP, CISM, CCSP, Microsoft Security certifications, or equivalent.
•Experience with AI-enabled cybersecurity solutions, SOAR platforms, and security analytics.
•Prior experience working with global enterprises, large consulting organizations, or complex regulated environments.
