Job Description
Summary
Deloitte India is hiring an Assistant Manager – Cybersecurity & ISO 27001 for its Cyber Strategy & Transformation (CST) practice in Bengaluru. This role is ideal for cybersecurity professionals with 3–7 years of experience in risk controls, ISO 27001 audits, ITGC testing, and compliance frameworks. As part of Deloitte’s cybersecurity consulting team, you’ll help clients achieve compliance with ISO 27001, NIST, COBIT, GDPR, and other regulatory standards.
Candidates with certifications such as ISO 27001 LA/LI, ISO 31000, ISO 22301, CISA, or ITIL will be strongly preferred. If you are passionate about IT risk assessments, cyber compliance, and security governance, this opportunity offers an exciting career path with global exposure.
Job Details at a Glance
| Job Title | Assistant Manager – Cybersecurity & ISO 27001 |
|---|---|
| Location | Bengaluru, India |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Department | Cyber Strategy & Transformation (CST) |
| Designation | Assistant Manager |
| Experience Required | 3–7 years in Risk Controls & Cybersecurity |
| Key Skills | ISO 27001, ITGC Testing, Risk Assessment, Compliance |
| Certifications Preferred | ISO 27001 LA/LI, ISO 31000, ISO 22301, CISA, ITIL |
| Frameworks | NIST, COBIT, GDPR, RBI, SEBI, CERT-In |
| Tools | GRC platforms (ServiceNow, Archer, etc.) |
| Employment Type | Full-time |
| Travel Requirement | Frequent client travel |
| Way of Working | On-site (Bengaluru office) |
Key Responsibilities
As an Assistant Manager – Cybersecurity & ISO 27001, you will:
- Conduct IT General Controls (ITGC) testing across access management, change management, backup & recovery, and IT operations.
- Perform ISO 27001 certification readiness assessments and support internal audits.
- Assist in implementation and maintenance of ISO 27001, including risk treatment planning and Statement of Applicability (SoA) reviews.
- Review and assess compliance against NIST, COBIT, GDPR, RBI, SEBI, and CERT-In requirements.
- Evaluate cybersecurity risks using structured methodologies and recommend remediation strategies.
- Collaborate with stakeholders across InfoSec, Compliance, and IT Operations to drive remediation efforts.
- Use GRC tools such as ServiceNow, Archer, or similar platforms to manage cyber risk and compliance programs.
Skills & Qualifications
Required:
- B.E / B.Tech in Computer Science, Information Technology, or related fields (Tier 1/2 colleges preferred).
- 3–7 years of cybersecurity consulting experience with a focus on risk controls and ISO 27001.
- Strong expertise in ITGC testing, ISO 27001 audits, and compliance reviews.
- Excellent communication skills (written & verbal).
Preferred:
- Certifications: ISO 27001 LA/LI, ISO 31000 LA/LI, ISO 22301 LA/LI, CISA, ITIL.
- Knowledge of cyber compliance regulations (RBI, SEBI, CERT-In).
- Familiarity with risk management frameworks and industry standards.
Why Deloitte?
- Work on high-impact cybersecurity and compliance engagements.
- Collaborate with global teams solving complex cyber risk challenges.
- Gain exposure to multiple industries and compliance frameworks.
- Access continuous upskilling opportunities and professional certifications.
- Be part of an inclusive, growth-driven workplace culture.
Apply Now
Ready to take the next step in your cybersecurity career?
👉 Apply directly on Deloitte’s official careers page