Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Maharashtra; On-site; INR 6,000,000 - 9,000,000; Full time

Job summary

Deloitte Touche Tohmatsu India LLP in Pune seeks a Manager | Security Frameworks and Standards to drive cyber risk governance and transformation. You will assess cybersecurity capabilities, validate controls, and develop roadmaps with stakeholders across technology and business units.

The role focuses on strengthening security maturity, governance, and cyber resilience, translating priorities into measurable outcomes for enterprise programs in India.

Qualifications

• Experience leading cyber capability and security control assessments across technology environments.
• Familiar with NIST CSF, ISO 27001, CIS Controls and organizational standards.
• Identify capability gaps, control deficiencies, cybersecurity risks, and transformation opportunities.
• Translate cybersecurity priorities into actionable roadmaps with measurable outcomes.
• Experience with control documentation, evidence management and remediation tracking.

Responsibilities

• Assess cybersecurity capabilities and evaluate control effectiveness.
• Identify improvement opportunities and support cyber transformation programs.
• Collaborate with senior stakeholders to translate priorities into roadmaps.
• Lead security control reviews and governance activities.
• Develop recommendations for capability modernization and process improvement.

Skills

Cyber capability development

Security control assessments

NIST CSF

ISO 27001

Microsoft Sentinel

Education

B.E./B.Tech or Master’s in Information Security / CS

Tools

Microsoft Sentinel

KQL

Job description

Select how often (in days) to receive an alert:

Job Title: Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation

Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation
Job requisition ID : 112131
Location: Pune
Entity: Deloitte Touche Tohmatsu India LLP

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks:Learn more about Cyber | Deloitte

We are looking for cybersecurity professionals with exposure to Cyber Risk, Security Controls, Cyber Capability Development, and Security Technology Enablement to support cybersecurity transformation initiatives.

The role focuses on assessing cybersecurity capabilities, evaluating control effectiveness, identifying improvement opportunities, and supporting strategic initiatives that enhance cyber resilience, governance, and security maturity across the enterprise. The individual will work with senior cybersecurity, technology, risk, and business stakeholders to translate cybersecurity priorities into actionable roadmaps and measurable outcomes.

Key Skills Required

• Proven experience in leading cyber capability and security control assessments across technology environments.
• Review security controls against frameworks such as NIST CSF, ISO 27001, CIS Controls, and organizational standards.
• Identify capability gaps, control deficiencies, cybersecurity risks, and transformation opportunities.
• Lead cyber maturity assessments and capability development roadmaps.
• Assist with control documentation, evidence management, remediation tracking, and improvement initiatives.
• Evaluate identity, endpoint, network, cloud, and application security capabilities.
• Assess the effectiveness of preventive, detective, and corrective security controls.
• Utilize Microsoft Sentinel, KQL, and security telemetry to support control validation, capability assessment, and security effectiveness reviews.
• Analyze security events, trends, and control performance indicators to identify enhancement opportunities.
• Support cyber governance, risk management, and assurance activities.
• Contribute to cyber transformation programs focused on strengthening security posture and cyber resilience.
• Develop recommendations for capability modernization, control optimization, and process improvement.
• Collaborate with technology, infrastructure, cloud, and business teams to implement cybersecurity improvements.
• Support cybersecurity metrics, reporting, dashboards, and executive-level insights.
• Maintain assessment findings, recommendations, and transformation deliverables.
• Knowledge of incident-response methodologies and common attack techniques to support security control reviews, control effectiveness assessments, and cyber capability improvement initiatives.
• 8-10 years of experience in Cybersecurity, Cyber Risk, Security Controls, Governance, Compliance, or Cyber Transformation.
• Understanding of cybersecurity control frameworks and industry standards.
• Exposure to NIST CSF, ISO 27001, CIS Controls, or equivalent frameworks.
• Working knowledge of Microsoft Sentinel and KQLfor security analysis, control validation, and cyber capability assessments.
• Experience in leading security control reviews, risk assessments, or capability assessments.
• Knowledge of identity, endpoint, network, cloud, and application security domains.
• Strong analytical, problem-solving, and stakeholder engagement skills.
• Strong documentation, reporting, and communication capabilities.
• B.E./B.Tech (Tier 1/2) or Master’s degree in Information Security, Computer Science, or a related field