Vista previa de la oferta
Deputy Manager | Third Party Risk Management | Delhi | Cyber Strategy & Transformation
manager · Consulting
Deputy Manager | Third Party Risk Management | Delhi | Cyber Strategy & Transformation
• Job requisition ID : 109168
• Location: Delhi
• Entity: Deloitte Touche Tohmatsu India LLP
The Team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your work profile
- Lead engagement teams in executing TPRM assessments, technology risk reviews, security audits, and advisory engagements across diverse client environments.
- Develop and enhance TPRM policies, procedures, SOPs, governance frameworks, operating models, and playbooks, including vendor lifecycle processes covering onboarding, due diligence, risk assessment, contracting, monitoring, renewal, and offboarding.
- Define and implement risk tiering methodologies, assessment criteria, escalation mechanisms, exception management, and reporting structures aligned with regulatory expectations and industry best practices.
- Conduct technical control assessments across infrastructure, cloud environments, applications, databases, and network components, evaluating controls related to access management, encryption, logging and monitoring, vulnerability management, patch management, backup security, and incident response.
- Assess third-party security posture against ISO 27001, NIST, PCI DSS, and other applicable cybersecurity frameworks, and support secure design reviews and technology risk evaluations for critical systems and outsourced services.
- Interpret and apply regulatory requirements related to outsourcing, information security, data protection, and operational resilience, ensuring alignment with client control environments and remediation initiatives.
- Perform quality reviews of engagement deliverables to ensure accuracy, completeness, and adherence to Deloitte quality standards.
- Support proposal preparation, RFP responses, solution development, and identification of new advisory opportunities, while guiding and mentoring team members during assessments, audits, and advisory engagements.
- Drive capability building initiatives by strengthening technical and process-oriented competencies and promoting AI-enabled GRC automation, analytics, and continuous monitoring capabilities within the team
Key SKills Required
Education - Bachelor's degree or Master’s degree
6+ years of experience in Cyber Security, Third Party Risk Management, Technology Risk, IT Risk Consulting, or Information Security.
Experience with ISO/IEC 27001 / ISO22301 / NIST CSF etc implementation and audits
Preferred certifications ISO 27001 LA / ISO 42001 / ISO22301 LI or LA, CISA / CRISC / CRISP etc