Consultant | ISO:27001 | Delhi | Cyber Strategy & Transformation
• Job requisition ID : 115356
• Location: Delhi
• Entity: Deloitte Touche Tohmatsu India LLP
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks: Learn more about Cyber | Deloitte
Your work profile
- As a Consultant in our Cyber Team, you will build and nurture strong working relationships with internal teams and clients, with the objective of consistently exceeding client expectations.
We are looking for an Information Security Consultant specializing in Governance, Risk & Compliance (GRC) to support information security audits, risk assessments, regulatory compliance, and security control evaluations. The candidate will be responsible for assessing control effectiveness, validating audit evidence, identifying compliance gaps, maintaining audit documentation, and coordinating with stakeholders to drive remediation and closure of audit findings.
Key Skills Required
- Experience Required: Minimum 3+ years of relevant experience in Cyber Security, Information Security, Compliance, Governance, or related domains.
- Perform internal and external information security audit engagements to evaluate compliance with applicable security standards, regulatory requirements, and organizational policies.
- Conduct control testing, walkthroughs, evidence reviews, and validation of information security controls.
- Support risk assessment activities by identifying control gaps, evaluating risks, documenting observations, and recommending remediation actions.
- Assist in ISO 27001:2022 compliance assessments, including Information Security Management System (ISMS) controls and documentation.
- Perform compliance gap analysis and support the development and tracking of corrective action plans.
- Review audit evidence, maintain audit working papers, and prepare audit reports and compliance documentation.
- Support regulatory compliance and data localization audit activities through evidence assessment and control validation.
- Coordinate with client stakeholders to facilitate evidence collection, clarify control requirements, and track remediation activities.
- Monitor audit findings and follow up with stakeholders to ensure timely closure of identified gaps.
- Support IT Service Management (ITSM) processes and leverage tools such as ServiceNow for workflow management and documentation.
- Bachelor of Technology or Engineering (IT,CS) OR Master Of Computer Application (MCA) B. E/ B-Tech (Tier 1/2) or MCA.
- Government & Public Sector - Infrastructure Security/Audit,
- Network Security.
- ISMS ISO 27001 Audit Cyber Security Policy Network Security
- Professional certifications such as CEH, ISO 27001, CCNA, ISO 20000