Deloitte—T&T | Cyber: CST | Consultant | ISMS | Delhi

Job description

Description: T&T | Cyber: CST | Consultant | ISMS | Delhi • Job requisition ID : 106615 • Location: Delhi • Entity: Deloitte Touche Tohmatsu India LLP The Team Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks: Learn more about Cyber | Deloitte Your work profile As a Consultant in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: As part of the Cyber Governance, Risk & Compliance (GRC) team, you will work with clients across industries to strengthen cybersecurity governance, manage enterprise risks, and support regulatory compliance initiatives. - Support the development and implementation of cybersecurity governance and risk management frameworks aligned with business and regulatory requirements. - Perform cybersecurity maturity assessments using frameworks such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, and COBIT. - Plan and execute ITGC testing across access management, change management, logical security, and operational controls. - Conduct IT and OT security audits to assess security controls, governance processes, and compliance posture. - Assist clients in implementing and reviewing information security controls across IAM, incident management, backup & recovery, endpoint security, change management, physical security, and media handling. - Support compliance initiatives related to RBI, SEBI, IRDAI, CERT-In, NCIIPC, PCI DSS, and other regulatory standards. - Track evolving cybersecurity regulations and support remediation and compliance improvement activities. - Support PCI DSS assessments, readiness reviews, and gap analysis engagements. - Assess application security governance practices including Secure SDLC, threat modelling, and secure coding standards. - Evaluate cloud governance and security controls across AWS, Microsoft Azure, and Google Cloud Platform (GCP). - Prepare client deliverables including risk assessment reports, audit observations, compliance dashboards, and executive presentations. - Collaborate with internal teams and client stakeholders on cybersecurity transformation and compliance initiatives. - Conduct Third-Party Risk Management (TPRM) assessments and support enhancement of TPRM frameworks within enterprise risk programs. - Key Required Skills: - Professional certifications such as CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI, ISO 31000 LA/LI, ISO 22301 LA/LI, ITIL, or PCI QSA are preferred - In-depth knowledge of security frameworks and standards such as NIST, ISO 27001, and COBIT - Strong analytical, communication, and stakeholder management skills - Cyber GRC recent experience ranging from 1 to 3 years is mandatory - B.E./B.Tech (Tier 1/2) or Master’s degree in Information Security, Computer Science, or a related field