Assistant Manager | Third Party Risk Management | Pune | Cyber Strategy & Transformation

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Deloitte Touche Tohmatsu India LLP invites applications for an Assistant Manager in Third Party Risk Management in Pune. The role focuses on embedding cyber risk controls and managing vendor risk within cyber strategy and transformation initiatives.

You will conduct risk assessments, audit engagement, and liaise with clients and regulators to document requirements, ensuring robust information security practices across systems and processes.

Qualifications

• Bachelor's degree in computer science or IT with 2+ years IT auditing/security experience.
• 2+ years IT Audits, Cloud security.
• Cyber TPRM experience 1–7 years is preferred.
• ISO22301 implementation and audits experience.
• CBCI/CBCP/ISO22301 LI or LA, CISSP/CISA/CISM/CEH beneficial.

Responsibilities

• Conduct ISMS or Third-Party Risk Assessments and audits.
• Identify gaps, risks and opportunities; improve policies and controls.
• Document information security risk and compensating controls in reports.
• Liaise with clients and regulators to document requirements/obligations.
• Understand third-party/vendor risk management considerations.

Skills

Third-party risk

Stakeholder liaison

Risk assessments

Documentation & reports

Data privacy

Security frameworks

Education

Bachelor's degree in CS/IT or related field

Job description

Job Title: Assistant Manager | Third Party Risk Management | Pune | Cyber Strategy & Transformation

Assistant Manager | Third Party Risk Management | Pune | Cyber Strategy & Transformation
• Job requisition ID : 114672
• Location: Pune
• Entity: Deloitte Touche Tohmatsu India LLP

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks.Learn moreabout Cybersecurity

• ISMS or Third-Party Risk Assessments.


• Ability to effectively liaise with clients and manage stakeholder expectations.


• Work with client teams from various depts. Such as compliance teams, auditing and regulators to identify and document various requirements/obligations


• Conducting risk assessments and audits with respect to people, process and technology


• Identification of gaps/observations, risks, opportunities and improvement of policies, processes, procedures and standards


• Documenting information security risk, recommendation and compensating controls in the form of assessment/audit reports


• Understanding of Third party/vendor/supplier risk management considerations


• Knowledge of Data Protection & Privacy related risks associated with Third-Party and relevant control


• frameworks for Third party risk management


• Excellent documentation and presentation skills


• Highly motivated and willing to work in local and global environments


• Bachelor's degree in computer science, Information Technology or related field.


• Relevant experience of 2+ years in IT Audits, Cloud security


• Cyber TPRM experience ranging from 1 year to 7yrs is mandatory.


• Experience with ISO22301 implementation and audits


• Preferred certifications CBCI / CBCP / ISO22301 LI or LA Offensive Security Certified Professional, CISA to


• work in a cross-functional, cross-cultural matrix environment\


• Security certifications like CISSP, CISA, CISM, CEH, ISO27001


• Work experience in Infrastructure / Application Security


• Work experience in IT Audit


• Work experience in Information Risk Management