Analyst, Cyber Program Design and Governance-ISO Security Cloud& AI- Hyderabad

Summary

Position Summary

The ISO Governance, Risk, and Compliance Analyst is responsible for supporting and strengthening the organization's Information Security Management System (ISMS), with primary alignment to ISO/IEC 27001:2022 and related ISO standards for cloud security, cloud privacy, and artificial intelligence governance.

This analyst role leads day-to-day ISO compliance activities, including ISMS documentation, risk assessment coordination, control testing, evidence management, audit readiness, corrective action tracking, and continuous improvement of ISO-aligned security processes.

The role works closely with IT, Security Operations, Privacy, Legal, Risk, and Business teams to ensure information security roles, responsibilities, controls, and evidence are clearly defined, maintained, and audit-ready.

Work you'll do

As an ISO Security Cloud& AI on the Member firm team, you will be responsible for:

• Maintain and improve ISO/IEC 27001:2022-aligned ISMS policies, standards, procedures, control documentation, and governance records
• Coordinate information security risk assessments, maintain risk registers, and track treatment plans, risk owners, due dates, and acceptance records
• Support ISO certification, surveillance, internal audit, and external audit activities through evidence collection, control walkthroughs, self-assessments, and remediation tracking
• Support cloud security, cloud privacy, and artificial intelligence governance activities aligned to ISO/IEC 27017, ISO/IEC 27018, and ISO/IEC 42001
• Develop dashboards, management review materials, and process improvements to strengthen audit readiness, control monitoring, and continual ISMS improvement
  
  

The team

This team helps protect the organization's information assets through governance, risk, and compliance practices that support secure business operations. The team works closely with technology, privacy, legal, risk, and business stakeholders to maintain security standards, manage risk, and improve audit readiness. It also helps translate security and compliance requirements into practical controls across enterprise, cloud, and AI-enabled environments.

Location: Hyderabad

Shift Timings: 2 PM to 11 PM IST

Qualifications

Required:

• 1-2.5 years of experience in information security governance, risk, and compliance, information security management systems, or information technology audit
• Experience supporting an information security management system aligned to ISO/IEC 27001/27017/27018/ 42001.
• Experience coordinating risk assessments, maintaining risk registers, and tracking corrective actions or treatment plans
• Experience supporting certification audits, surveillance audits, internal audits, or external audits
• Experience maintaining control documentation, evidence repositories, or document control records
• Experience with ServiceNow Governance, Risk, and Compliance, Archer, OneTrust, or equivalent governance, risk, and compliance tools
  
  

Preferred:

• Experience supporting cloud security governance aligned to ISO/IEC 27017
• Experience supporting cloud privacy reviews aligned to ISO/IEC 27018
• Experience supporting artificial intelligence governance activities aligned to ISO/IEC 42001
• Experience developing dashboards, key risk indicators, or management review reporting
• ISO/IEC 27001 Lead Implementer, Lead Auditor, or Internal Auditor certification
  
  

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 359827