Deputy Manager | Third Party Risk Management | Delhi | Cyber Strategy & Transformation
• Job requisition ID : 109168
• Location: Delhi
• Entity: Deloitte Touche Tohmatsu India LLP
- Lead engagement teams in executing TPRM assessments, technology risk reviews, security audits, and advisory engagements across diverse client environments.
- Develop and enhance TPRM policies, procedures, SOPs, governance frameworks, operating models, and playbooks, including vendor lifecycle processes covering onboarding, due diligence, risk assessment, contracting, monitoring, renewal, and offboarding.
- Define and implement risk tiering methodologies, assessment criteria, escalation mechanisms, exception management, and reporting structures aligned with regulatory expectations and industry best practices.
- Conduct technical control assessments across infrastructure, cloud environments, applications, databases, and network components, evaluating controls related to access management, encryption, logging and monitoring, vulnerability management, patch management, backup security, and incident response.
- Assess third-party security posture against ISO 27001, NIST, PCI DSS, and other applicable cybersecurity frameworks, and support secure design reviews and technology risk evaluations for critical systems and outsourced services.
- Interpret and apply regulatory requirements related to outsourcing, information security, data protection, and operational resilience, ensuring alignment with client control environments and remediation initiatives.
- Perform quality reviews of engagement deliverables to ensure accuracy, completeness, and adherence to Deloitte quality standards.
- Support proposal preparation, RFP responses, solution development, and identification of new advisory opportunities, while guiding and mentoring team members during assessments, audits, and advisory engagements.
- Drive capability building initiatives by strengthening technical and process-oriented competencies and promoting AI-enabled GRC automation, analytics, and continuous monitoring capabilities within the team