Manager - Cloud Security - Mumbai

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about   Cybersecurity

Your Work Profile

• Lead Cloud Security Risk Management activities across large-scale multi-cloud environments, with a primary focus on GCP, ensuring effective identification, prioritization, and mitigation of security risks.
• Conduct security and risk assessments for cloud environments, SaaS applications, new technology initiatives, and infrastructure changes to identify vulnerabilities, misconfigurations, and potential data exposure risks.
• Evaluate third-party applications, cloud service providers, and integrations to assess security, compliance, and operational risks against organizational and regulatory requirements.
• Identify gaps in access management, data protection, encryption, and security controls, and drive remediation efforts to strengthen the overall security posture.
• Design and implement secure cloud and hybrid-cloud architectures across GCP and OCI platforms, ensuring appropriate security controls are integrated into business and technology solutions.
• Manage cloud security operations, including cloud inventory governance, security change reviews, compliance assessments, risk tracking, remediation management, and closure of identified security gaps.
• Develop and maintain cloud security standards, policies, procedures, governance frameworks, and best-practice documentation to support secure cloud adoption.
• Ensure cloud and SaaS environments comply with organizational security requirements and industry regulations, including ISO 27001, SEBI, RBI guidelines.
• Act as a trusted security advisor to Technology, Engineering, Infrastructure, and Application Development teams, providing guidance on secure cloud deployments and enterprise cloud transformation initiatives.
• Lead cloud security awareness and knowledge-sharing initiatives, promoting security best practices and continuous improvement of the organization's cloud security capabilities.
• Assess the security posture of SaaS applications and ensure adoption of security best practices such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC).
• Monitor changes in SaaS and cloud environments and evaluate their impact on the organization's security posture.
• Utilize security tools such as CASB and SaaS Security Posture Management (SSPM) platforms to continuously monitor and assess risks.
• Perform ongoing reviews to identify security weaknesses and recommend corrective actions.
• Ensure cloud and SaaS platforms comply with internal security policies and applicable regulatory requirements such as ISO 27001, SOC 2, and RBI guidelines.
• Support internal and external audits by maintaining evidence of security controls, assessments, and compliance activities.
• Contribute to the development and enhancement of security governance frameworks and compliance programs.
• Analyze cloud and SaaS environments using security monitoring tools, dashboards, and assessment platforms.
• Review APIs, integrations, and data flows to identify potential security and privacy risks.
• Leverage automation and scripting to improve the efficiency of security assessments, monitoring, and reporting processes.
• Stay updated on emerging cloud security threats, risks, and industry best practices.
• Prepare and present risk assessment reports, dashboards, and recommendations to technical and business stakeholders.
• Maintain risk registers and track remediation efforts through closure.
• Communicate security findings and recommended actions to technology, security, compliance, and business teams.
• Work closely with stakeholders to prioritize and resolve identified security risks.
• Drive continuous improvement of cloud and SaaS security controls, processes, and governance practices.
• Recommend enhancements to SaaS onboarding, vendor assessment, and application governance processes.
• Contribute to the development and review of cloud and SaaS security policies, standards, and procedures.
• Promote security best practices and support secure adoption of cloud technologies across the organization.

Key Skills Required

• Bachelor's degree in Telecommunications, Computer Science, Cybersecurity, Information Technology, or related field.
• Strong understanding of cloud technologies and platforms: Azure/AWS/GCP/OCI
• Understanding of cloud security architecture
• Understanding of Zero trust principle, security technologies and controls:
• AWS/Azure/GCP/OCI cloud native security controls, Identity Access Management, Data Security, IDS/IPS, SIEM, web application firewall, cryptography, Kubernetes, container security etc.
• Should have conducted cloud security assessments and configuration reviews as per industry best practices
• Familiarity with industry-leading standards and frameworks such as ISO 27001, NIST, CSA CCM, CIS benchmarks to help clients adhere to compliance requirements
• Knowledge and experience of Risk Management Lifecycle (Risk Identification, Risk Assessment, Risk Response, & Reporting)
• Experience with cloud security tools and services
• Knowledge and experience in developing/creating cloud security policies and frameworks for organization
• Effective written and communication skills
• Strong sense of ownership, urgency, and drive
• Demonstrate teamwork and collaborate with other teams to ensure clients cloud environment is secure
• Certification(s) such as CISSP, CISM, or equivalent are preferred and any global cloud certifications.
• 10+ years of working experience in Cyber Security Consulting with proficiency in cloud security assessment
• Should have played a role in client engagements
• Certifications: CISSP/CISM/CCSK/CCSP, Azure/AWS/GCP certifications
• Base location: Mumbai
• Professional is required to work from office