Assistant Manager – GRC Cyber Security | Deloitte India | Gurgaon (Cyber CST – T&T)

Job Description

Summary

Deloitte India is actively hiring for the role of Assistant Manager – GRC Cyber Security (Cyber CST – T&T) based in Gurgaon, with work-from-office requirements. This is an exciting opportunity to join the Governance, Risk, and Compliance (GRC) division within Deloitte’s Cyber Security team, where you’ll help global clients build resilient cyber frameworks, assess risk postures, and ensure compliance with evolving regulatory and security standards.

If you have 3.5–6 years of experience in cybersecurity risk management, GRC implementation, ISO 27001, NIST CSF, and third-party risk assessments, this is the ideal career move. As a Cyber Security GRC Consultant at Deloitte Touche Tohmatsu India LLP, you’ll lead audits, assessments, and implementation projects that make a tangible impact.

Job Details at a Glance

About the Role: GRC Cyber Security – Assistant Manager at Deloitte India

In this role, you’ll be working with Deloitte’s Cyber Strategy & Transformation (CST) team, responsible for designing and deploying cybersecurity frameworks, risk assessments, regulatory compliance models, and secure IT-OT architectures.

You’ll lead cyber audits, define governance structures, assist clients in compliance with RBI, SEBI, IRDA guidelines, and drive cyber resilience through third-party risk management, vulnerability analysis, and secure SDLC practices.

Key Responsibilities

• Develop and implement comprehensive cybersecurity and GRC frameworks for clients.
• Conduct risk assessments, develop risk treatment plans, and track mitigation efforts.
• Lead and execute audits based on ISO 27001, PCI DSS, and NIST 800-53 standards.
• Manage third-party risk assessments and vendor compliance evaluations.
• Conduct ITGC testing across access, change, and operational control areas.
• Frontend ISO 27001 ISMS implementation and sustainment projects.
• Define, roll out, and maintain secure SDLC, threat modeling, and application security protocols.
• Deliver actionable insights via cybersecurity maturity assessments.
• Integrate GRC tools and methodologies tailored to client-specific environments.
• Ensure ongoing compliance with regulatory mandates from RBI, SEBI, IRDA, NCIIPC, and more.
• Support cloud security initiatives across AWS, Azure, and Google Cloud platforms.

Key Skills & Competencies

• In-depth knowledge of GRC, ISO 27001, NIST CSF, COBIT, ITIL, and PCI DSS.
• Experience in information security audits, cyber maturity assessments, and incident management.
• Proficiency in designing secure IT and OT architectures.
• Hands-on experience with ITGC, TPRM, and cybersecurity control testing.
• Knowledge of regulatory frameworks and best practices across multiple industries.
• Strong stakeholder engagement, project leadership, and team management skills.

Preferred Qualifications

• Education: B.E / B.Tech in Computer Science, Information Security, or a related field.
• Certifications (Preferred):
  • CISSP, CISA, CISM, CRISC
  • ISO 27001/31000/22301 LA/LI
  • PCI QSA, ITIL

Life at Deloitte India

At Deloitte South Asia, your growth is limitless. You’ll be part of a culture that promotes inclusion, continuous learning, and impactful leadership at every level.

• Career Mobility: Opportunities for cross-domain and global roles
• Learning & Upskilling: Access to Deloitte University and cutting-edge industry training
• Inclusive Environment: Diversity, equity, and inclusion are core to our values
• Wellbeing Programs: 360° approach to mental, physical, and professional wellbeing

Apply Now

📢 Join Deloitte India’s Cyber Security team as Assistant Manager – GRC and make a lasting impact on global cybersecurity landscapes.

🔗 Apply via Deloitte’s Official Careers Page

Help secure the future—starting today.