T&T | Cyber: D&R I Assistant Manager | Network Security - VAPT | Mumbai
• Job requisition ID : 107102 
• Location: Mumbai
• Entity: Deloitte Touche Tohmatsu India LLP 

The team 

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at    how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks.  Learn more about Cybersecurity  

Your work profile

We are seeking a skilled and detail-oriented Network Security profession to support IT audit and risk advisory initiatives. The role focuses on assessing, auditing, and strengthening client network security environments through risk-based methodologies, compliance frameworks, and industry best practices. The candidate will work with cross-functional teams to evaluate network security controls, identify vulnerabilities, and support remediation efforts.

• Assess network architecture, for security Zoning based on network & data flow architecture adhering to CISA Zero Trust Architecture Framework and segmentation controls.
• Evaluate security controls against frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, and applicable regulatory controls.
• Perform configuration reviews of various technologies, including but not limited to network switches, routers, firewalls, WAF, Active Directory, proxies, VPN, IDS/IPS, antivirus, and DLP solutions.
• Identify control gaps and recommend remediation actions.
• Review firewall rules, access controls, and secure configurations.
• Maintain audit documentation and working papers.
• Collaborate with stakeholders to understand risks and controls.
• Stay updated on emerging threats and security practices.

Key Skills required: 

• Minimum 2 years of experience in network security, or cybersecurity.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP).
• Hands-on experience with firewalls (Fortinet, Cisco, Palo Alto, Check Point).
• Knowledge of VPNs, WAF, Proxy, SIEM, IDS/IPS, and endpoint security controls.
• Basic understanding of cloud security (AWS/Azure).
• Certifications :  At least one OEM certification such as CCNA/CCNA Security, NSE 4+, PCNSA, or CCSA.
• CEH, Security+, or ISO 27001 Lead Auditor/Implementer.
• Education: Bachelor’s degree in information security, Computer Science, or a related field.