Assistant Manager – Risk Control (Cyber Strategy & Transformation) | Deloitte | Pune
Job Description
Summary
Deloitte India is hiring an Assistant Manager – Risk Control (Cyber Strategy & Transformation) in Pune. This role is ideal for professionals with 2–6 years of experience in risk management, IT controls, SOX testing, and cyber security frameworks. The position requires strong expertise in controls assurance, IT/IS risk management, and regulatory compliance—preferably with exposure to global banking clients.
If you hold ISO 27001, CRISC, or CISA certification, have hands-on experience with NIST, ISO, or COBIT frameworks, and are passionate about cyber risk control and IT governance, Deloitte offers the right platform to grow your career while working with industry leaders on cutting-edge technology transformation projects.
Job Details at a Glance
| Job Title | Assistant Manager – Risk Control (Cyber Strategy & Transformation) |
|---|---|
| Location | Pune, India |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Department | Cyber Strategy & Transformation (CST) |
| Designation | Assistant Manager / Senior Consultant |
| Experience Required | 2–6 years in Risk Management & Controls Assurance |
| Key Skills | SOX Testing, IT/IS Controls, Risk Assessment, Cyber Security |
| Certifications | ISO 27001, CRISC, or CISA (Mandatory); CISSP (Preferred) |
| Frameworks | NIST, ISO, COBIT, Internal Control Concepts |
| Employment Type | Full-time, Client-facing |
| Travel Requirement | Frequent client travel |
| Way of Working | Hybrid |
Responsibilities
As an Assistant Manager – Risk Control, you will:
- Conduct independent assessments of IT and Information Security (IS) controls.
- Perform SOX testing, cloud controls testing, and data management risk assessments.
- Design and execute control testing strategies to evaluate effectiveness of IT/IS controls.
- Review testing approaches, process documentation, and compliance frameworks.
- Develop test plans, scripts, and templates to streamline testing and reporting.
- Prepare detailed testing documentation, workpapers, and reports.
- Collaborate with stakeholders for walkthroughs, evidence collection, and risk analysis.
- Perform security reviews to identify gaps and recommend improvements.
- Align client risk-control methodologies with NIST, ISO, and COBIT frameworks.
- Provide input to security risk management plans and transformation initiatives.
Skills & Qualifications
Must-Have:
- Bachelor’s degree in IT, Information Security, or related field.
- 2–6 years of experience in risk management, controls assurance, or internal audit.
- Strong understanding of risk management frameworks (NIST, ISO, COBIT).
- Knowledge of IT/IS controls, SOX testing, and fraud prevention controls.
- ISO 27001, CRISC, or CISA certification (mandatory).
- Excellent verbal and written communication skills.
Preferred:
- Experience with global banking clients.
- Familiarity with CISSP certification, cyber resilience, and data management frameworks.
- Strong stakeholder management across Three Lines of Defense.
- Hands-on experience in regulated environments.
Why Deloitte?
- Be part of a global leader in cyber strategy and risk management.
- Work with world-class clients across industries, including financial services.
- Gain exposure to advanced risk control frameworks and methodologies.
- Thrive in a hybrid work model with travel opportunities.
- Access Deloitte’s career growth, leadership programs, and inclusion initiatives.
Apply Now
Accelerate your career in cyber risk control and IT governance with Deloitte.
👉 Apply directly on Deloitte’s official careers page