T&T | Cyber: CST | Assistant Manager | Security Frameworks and Standards | Bengaluru

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Deloitte Touche Tohmatsu India LLP in Bengaluru seeks an Assistant Manager for Security Frameworks and Standards to lead risk governance, audits, and regulatory compliance initiatives. The role focuses on IT/OT security, program design, and third-party risk management.

The ideal candidate will have experience across RBI/SEBI/IRDA controls, and hands-on capability in security assessments and control implementations within client environments.

Qualifications

• Bachelor's or Master's degree or equivalent educational qualification required.
• Experience in design, development, and rollout of security programs.
• Knowledge of RBI, SEBI, IRDA, PCI DSS, and other frameworks is preferred.

Responsibilities

• Establishing and maintaining risk governance frameworks, facilitating risk identification, evaluation, mitigation, and continuous monitoring.
• Designing and validating secure IT and OT architectures, ensuring integration of application security principles throughout the software development lifecycle.
• Experience in design, development, and roll-out of security programs, developing IT risk management strategies, compliance programs.
• Overseeing third-party risk assessments and managing regulatory compliance with RBI, SEBI, IRDA, PCI DSS, and others.
• Planning and executing IT and OT security audits alongside ITGC testing, identifying gaps, and collaborating with teams to remediate vulnerabilities.
• Assessing cybersecurity maturity using frameworks like NIST CSF to develop strategic roadmaps.

Skills

Risk governance

Cyber frameworks

Threat modelling

Security program design

IT risk mgmt

Regulatory compliance

Audits

Stakeholder mgmt

Team leadership

Education

Bachelor's/Master's degree

Job description

Select how often (in days) to receive an alert:

Job Title: T&T | Cyber: CST | Assistant Manager | Security Frameworks and Standards | Bengaluru

T&T | Cyber: CST | Assistant Manager | Security Frameworks and Standards | Bengaluru
Job requisition ID : 112195
Location: Bengaluru
Entity: Deloitte Touche Tohmatsu India LLP

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

We expect our people to embrace and live our purpose by challenging themselves to identify issues that are most important for our clients, our people, and for society.

Establishing and maintaining risk governance frameworks, facilitating risk identification, evaluation, mitigation, and continuous monitoring

Designing and validating secure IT and OT architectures, ensuring integration of application security principles throughout the software development lifecycle.

Experience in design, development, and roll-out of security programs, developing IT risk management strategies, compliance programs.

Overseeing third-party risk assessments and managing compliance with regulatory frameworks such as RBI, SEBI, IRDA, PCI DSS, and others.

Planning and executing IT and OT security audits alongside IT General Controls (ITGC) testing, identifying gaps, and collaborating with teams to remediate vulnerabilities.

Assessing the organization’s cybersecurity maturity (using frameworks like NIST CSF) and developing strategic roadmaps to strengthen security posture over time.

Cyber Threat and Risk Assessment - Ability to identify business implications and identifying tactical and strategic recommendations to mitigate the risk.

Possesses certifications such as ISO27001 LA/ LI, ISO22301 LA/LI, PMP, CISSP, CISA, CISM certification- preferred.

Ability to define the business & technical scope of a project. Should be able to independently lead delivery teams to deliver projects according to client specifications after such scope is defined.

Key Skills Required

• Develop, implement, andmaintainrisk and governance frameworks.
• Guide teams/Handleclient information security posture,identifythe gaps/risks in the existingenvironmentand develop solutions to mitigate the identified gaps/risk.
• Recommend security solutions and enhancements aligned with business goals and threat landscape.
• Performcybersecurity maturity assessmentsusing established frameworks such asNIST CSF,NIST-800-53,ISO 27001,ISO/IEC 42001 etc
• Lead risk identification, evaluation, mitigation, and monitoringactivities.
• Deliver actionable insights and improvement roadmaps based on assessmentresults.
• Understand and evaluate application security architectures, including secureSDLC practices, threatmodellingand secure codingstandards.
• Plan, execute, and report on comprehensiveIT and OT security audits.
• Lead teamsorwork as teammemberto conductInformation Systems audits covering IT infrastructure assets.
• Manages security andcyber strategyprojects, guides the team on a day-to-daybasisand ensures that assigned tasks and responsibilities are fulfilled ina timelyfashion.
• Responsible to assist client inreview / implement Information Security controls in areas as mentioned, but not limited to: Change management process, Incidentmanagementprocess, Backup process, User identity and access management, Antivirus management, SLA performance and monitoring
• Provide guidance for remediation efforts to ensure ongoing compliance.
• Demonstrates understanding of complex business and information technology managementprocesses.
• Ensure compliancewith cybersecurity guidelines and regulations issued by RBI, SEBI, IRDA, BCAS, NCIIPC, and other relevant bodies.
• Track evolving regulatory requirements and integrate changes into the cybersecurityprogram.
• Plan and executeITGC control testingcovering areas such asaccess management, change management, and operations controls.Identifycontrol gaps and support remediationefforts.
• Interacts with clients,managers,and partners to build and nurture strongrelationships.
• Tailors firm tools and methodologies as per clientrequirements.
• Bachelor's or Master's degree or equivalent educational qualification required.