T&T | Cyber - ES | Manager | Cloud Security

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Mumbai; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft is seeking a Manager in Cyber: ES to lead cloud security assessments and risk analyses across multiple cloud platforms. The role involves independent leadership, client interaction, and delivering high-quality risk assessments for complex cloud environments.

Candidates should have 10+ years in cyber security consulting with cloud expertise, strong understanding of cloud architectures, and relevant certifications.

Qualifications

• 10+ years of Cyber Security Consulting experience with cloud security assessment.
• Proficiency in Azure, AWS, GCP, and OCI cloud platforms.
• CCSK/CCSP and related cloud security certifications preferred.

Responsibilities

• Lead threat-based risk assessments and cloud security reviews.
• Assess cloud security architecture and controls for compliance.
• Prepare cloud risk assessment reports.
• Scope assessments with clients and document findings.
• Communicate cloud information security risks to stakeholders.

Skills

Cloud security

Threat assessment

Cloud architecture

Zero trust

Identity access management

Kubernetes security

SIEM

ISO 27001

CCSK/CCSP

Cloud platforms (Azure AWS GCP OCI)

Education

B.E./B.Tech or MSc in Information Security/CS

Tools

Kubernetes

Job description

Select how often (in days) to receive an alert:

Job Title: T&T | Cyber - ES | Manager | Cloud Security

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Lear more aboutCybersecurity

• As Manager in our Cyber: ES Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations
• Work independently to lead and complete high quality threat-based risk assessments, business impact analysis across a diverse set of cloud technologies, business functions, and platforms. Conduct cloud infrastructure security risk assessments based on cloud security best practices.
• Assess cloud security architecture
• Cloud security controls evaluation to ensure compliance with business scope, security policies and standards
• Preparing cloud infrastructure risk assessment reports.
• Work closely with internal management/team and client business representatives to scope assessments, gather documentation, interview clients, identify risks, document findings, and ensure transparent assessment of risks by following a structured risk assessment methodology.
• Driving the efforts to identify, assess, and communicate the cloud information security risks to relevant-internal and external stakeholders
• 10 years of working experience in Cyber Security Consulting with proficiency in cloud security assessment
• Strong understanding of cloud technologies and platforms: Azure/AWS/GCP/OCI
• Understanding of cloud security architecture
• Understanding of Zero trust principle, security technologies and controls:
• AWS/Azure/GCP/OCI cloud native security controls, Identity Access Management, Data Security, IDS/IPS, SIEM, web application firewall, cryptography, Kubernetes, container security etc.
• Should have conducted cloud security assessments and configuration reviews as per industry best practices
• Familiarity with industry-leading standards and frameworks such as ISO 27001, NIST, CSA CCM, CIS benchmarks to help clients adhere to compliance requirements
• Knowledge and experience of Risk Management Lifecycle (Risk Identification, Risk Assessment, Risk Response, & Reporting)
• Experience with cloud security tools and services
• Knowledge and experience in developing/creating cloud security policies and frameworks for organizations
• Cloud security certifications – CCSK/CCSP, AWS/Azure/GCP
• B.E./B.Tech (Tier 1/2) or Master’s degree in Information Security, Computer Science, or a related field