Information Security Manager (CISSP)

The team

The Enabling Areas – Information Technology team is responsible for building & maintaining different applications for Deloitte that focuses on providing employee experience.

Your work profile

• Manage client security assessments and due diligence responses.
• Manage security requirements in customer contracts and agreements.
• Maintain information security policies, standards, and governance.
• Ensure compliance with ISO 27001, NIST, privacy, and regulatory requirements.
• Manage vulnerability management, penetration testing, and remediation programs.
• Manage cybersecurity incidents, investigations, recovery, and reporting.
• Conduct security architecture reviews.
• Oversee cloud and infrastructure security controls and posture.
• Collaborate with technology teams to identify and mitigate cyber risks.
• Maintain audit evidence, security documentation, and compliance records.
• Deliver security awareness, cyber resilience, and training programs.
• Monitor security metrics, risks, incidents, and compliance status.

Skills Required

• 8-12 years of experience in Information Security, Cyber Security.
• Preferred certifications: CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor/Implementer.
• Experience in MSA review, client security questionnaires.
• Experience in Information Security, Cybersecurity, Risk, or Governance.
• Strong knowledge of ISO 27001, NIST, vulnerability management, and incident response.
• Experience in cloud security, security architecture, threat modeling, IAM, and security operations.
• Understanding of privacy, third-party risk, and audit requirements.
• Knowledge of AI security, Generative AI governance, and technology risk management.
• Ability to independently manage multiple security initiatives and deliver within timelines.
• Experience in working in MNCs preferred
• Bachelor's degree in information technology, Computer Science, or a related field.

Location and way of working

• Base location: Mumbai, Delhi, Pune, Bengaluru preferred.
• This profile may involve travel for work.
• Hybrid is our default way of working.