Deloitte—T&T | Cyber: ES | Deputy Manager | Security Architect | Pune

Job description

Description: T&T | Cyber: ES | Deputy Manager | Security Architect | Pune • Job requisition ID : 109343 • Location: Pune • Entity: Deloitte Touche Tohmatsu India LLP The team Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Lear more about Cybersecurity Your work profile: - Develop, implement, and maintain the organization's enterprise-wide cybersecurity and information security strategy. - Provide executive-level security guidance, recommendations, and periodic reporting to senior management and stakeholders. - Establish and drive the long-term cybersecurity roadmap aligned with business goals and emerging threats. - Advise leadership on security investments, priorities, and risk-based decision-making. - Ensure compliance with applicable security frameworks, standards, and regulations, including ISO 27001, NIST, IT Act, and other relevant requirements. - Conduct enterprise-wide information security risk assessments and maintain the organizational risk register. - Develop, review, and enforce information security policies, standards, procedures, and governance frameworks. - Strong domain knowledge of Network security, Risk control, IAM, Encryption, Zero trust, Security operations, vulnerability management, Incident response etc. - Support internal and external audits and ensure continuous compliance readiness. - Develop and oversee incident response plans, processes, and coordination activities. - Identify, assess, and mitigate cybersecurity risks across the organization. - Provide guidance on threat intelligence, vulnerability management, security monitoring, and emerging cyber threats. - Act as a key advisor during major security incidents and crisis management situations. - Lead and oversee cybersecurity programs, initiatives, resources, and security teams. - Establish security governance forums, steering committees, and reporting mechanisms. - Define and monitor security KPIs, KRIs, metrics, and maturity improvement programs. - Drive continuous improvement of the organization's cybersecurity capabilities and resilience. - Design and conduct enterprise-wide security awareness and education programs. - Develop role-based cybersecurity training initiatives for employees and leadership teams. - Plan and execute phishing simulation campaigns and measure effectiveness. - Foster a security-conscious culture across the organization. - Conduct and oversee third-party and vendor security risk assessments. - Establish security requirements and controls for suppliers, vendors, and service providers. - Evaluate supply chain cybersecurity risks and recommend mitigation measures. - Support procurement and contract reviews from a cybersecurity perspective. - Review and assess the security of infrastructure, applications, endpoints, networks, and cloud environments. - Provide strategic and technical recommendations to enhance security controls and architecture. - Oversee security audits, vulnerability assessments, and penetration testing activities. - Advise on implementation of industry best practices and security technologies. - Conduct Operational Technology (OT) security assessments and maturity reviews. - Provide guidance on the implementation of OT-specific security controls and frameworks. - Identify and mitigate cybersecurity risks in industrial control systems (ICS), SCADA, and OT environments. - Support secure integration between IT and OT environments. Key skills required - Bachelor’s or Master's degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field. - Minimum 8-10 years of experience in information security, cybersecurity, risk management, or IT leadership roles. - Proven experience in a CISO, Deputy CISO, Security Director, or vCISO capacity. - Strong understanding of security frameworks such as ISO 27001, NIST CSF, CIS Controls, COBIT, and regulatory compliance requirements. - Experience in risk management, incident response, security governance, cloud security, and third-party risk management. - Knowledge of OT/ICS security principles and industrial cybersecurity practices. - CISSP (Certified Information Systems Security Professional) - CISM (Certified Information Security Manager) - CRISC (Certified in Risk and Information Systems Control) - ISO 27001 Lead Implementer / Lead Auditor - CCSP (Certified Cloud Security Professional) - GIAC / GICSP (for OT Security)