T&T | Cyber: D&R | Assistant Manager | Network Security | Mumbai

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Mumbai; On-site; INR 1,400,000 - 2,300,000; Full time

Job summary

Deloitte Touche Tohmatsu India LLP in Mumbai seeks an Assistant Manager in Network Security to support IT audit and risk advisory initiatives. The role focuses on assessing, auditing, and strengthening client network security environments using risk-based methodologies and industry best practices.

Responsibilities include reviewing network architecture for security zoning, evaluating controls against ISO 27001/NIST/SOC 2, conducting configuration reviews of firewalls, VPNs, WAFs, proxies,

Qualifications

• 2–5 years of network security or cybersecurity experience.
• Experience with firewalls (Fortinet, Cisco, Palo Alto, Check Point).
• Knowledge of VPNs, WAF, proxies, SIEM, IDS/IPS, and endpoint security controls.
• Basic cloud security knowledge (AWS/Azure).

Responsibilities

• Assess network architecture for security zoning based on data flow.
• Evaluate controls against ISO 27001, NIST, CIS Controls, SOC 2, and regulatory controls.
• Perform configuration reviews of network devices, VPNs, proxies, WAFs, IDS/IPS, and EDR/antivirus.
• Maintain audit documentation and working papers.
• Collaborate with stakeholders to understand risks and controls.
• Stay updated on emerging threats and security practices.

Skills

Network security

Cybersecurity

TCP/IP

Firewall management

Cloud security

VPN

WAF

IDS/IPS

Endpoint security

Education

Bachelor’s or Master’s in information security or CS

Tools

Fortinet

Cisco

Palo Alto

Check Point

SIEM

Active Directory

DLP

Job description

T&T | Cyber: D&R | Assistant Manager | Network Security | Mumbai

• Job requisition ID : 112559
• Location: Mumbai
• Entity: Deloitte Touche Tohmatsu India LLP

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks.Learn moreabout Cybersecurity

We are seeking a skilled and detail-oriented Network Security profession to support IT audit and risk advisory initiatives. The role focuses on assessing, auditing, and strengthening client network security environments through risk-based methodologies, compliance frameworks, and industry best practices. The candidate will work with cross-functional teams to evaluate network security controls, identify vulnerabilities, and support remediation efforts.

• Assess network architecture, for security Zoning based on network & data flow architecture adhering to CISA Zero Trust Architecture Framework and segmentation controls.
• Evaluate security controls against frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, and applicable regulatory controls.
• Perform configuration reviews of various technologies, including but not limited to network switches, routers, firewalls, WAF, Active Directory, proxies, VPN, IDS/IPS, antivirus, and DLP solutions.
• Identify control gaps and recommend remediation actions.
• Review firewall rules, access controls, and secure configurations.
• Maintain audit documentation and working papers.
• Collaborate with stakeholders to understand risks and controls.
• Stay updated on emerging threats and security practices.

Key Skills required:

• Minimum 2-5 years of experience in network security, or cybersecurity.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP).
• Hands-on experience with firewalls (Fortinet, Cisco, Palo Alto, Check Point).
• Knowledge of VPNs, WAF, Proxy, SIEM, IDS/IPS, and endpoint security controls.
• Basic understanding of cloud security (AWS/Azure).
• Certifications : At least one OEM certification such as CCNA/CCNA Security, NSE 4+, PCNSA, or CCSA.
• CEH, Security+, or ISO 27001 Lead Auditor/Implementer.
• Education: Bachelor’s or Master's degree in information security, Computer Science, or a related field.