Manager – GRC Cyber Security | Deloitte India | Gurgaon
Job Description
Summary
Deloitte India is seeking an experienced Cyber Security Manager (GRC – Governance, Risk & Compliance) in Gurgaon to join our Cyber Strategy & Risk Team. This role is ideal for professionals with expertise in cybersecurity consulting, IT risk management, and compliance frameworks who can guide enterprise clients in building secure, resilient, and compliant technology environments.
As a Manager in Cyber Security, you will lead client engagements, implement governance frameworks, perform cyber risk assessments, and provide actionable insights aligned with industry standards such as ISO 27001, NIST CSF, COBIT, PCI DSS, and regulatory requirements from RBI, SEBI, IRDA, BCAS, and NCIIPC.
Join Deloitte to drive strategic cyber initiatives, strengthen organizational security postures, and advance your career in a leading cybersecurity consulting environment.
Job Details at a Glance
| Job Title | Manager – GRC Cyber Security |
|---|---|
| Job Requisition ID | 82933 |
| Department | Technology & Transformation – Cyber Strategy & Risk |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Location | Gurgaon, Delhi NCR |
| Designation | Manager |
| Experience Level | 8+ years in cybersecurity, risk management, and compliance |
| Certifications | CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI preferred |
| Work Mode | Office-based |
| Date Posted | October 6, 2025 |
Key Responsibilities
Cybersecurity Strategy & Governance
- Develop, implement, and maintain cyber risk and governance frameworks.
- Advise clients on strengthening information security posture and closing security gaps.
- Recommend security solutions aligned with business objectives and evolving threat landscapes.
Risk Management & Assessments
- Conduct cybersecurity risk assessments for enterprise systems and third-party vendors.
- Perform cyber maturity assessments using frameworks such as NIST CSF, NIST 800-53, ISO 27001.
- Plan and execute IT and OT security audits, including ITGC control testing and remediation guidance.
Compliance & Regulatory Oversight
- Ensure compliance with regulations from RBI, SEBI, IRDA, BCAS, NCIIPC, and other relevant authorities.
- Lead PCI DSS assessments, gap analysis, and remediation efforts.
- Guide clients on secure cloud architectures across AWS, Azure, and Google Cloud platforms.
Team Leadership & Client Management
- Lead and mentor cybersecurity teams on day-to-day project activities.
- Collaborate with clients, stakeholders, and internal teams to deliver actionable recommendations.
- Provide thought leadership on secure SDLC practices, vulnerability management, and risk mitigation strategies.
Required Skills and Qualifications
- Education: B.E/B.Tech (Tier 1/2) or Master’s in Information Security, Computer Science, or related field.
- Experience: 8+ years in cybersecurity consulting, GRC, and risk management.
- Certifications: CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI, ISO 22301 LA/LI, ITIL, or PCI QSA preferred.
- Technical Skills:
- Strong understanding of security frameworks (ISO 27001, NIST, COBIT).
- Expertise in IT and OT security audits, risk assessment, and third-party risk management.
- Knowledge of cloud security, secure architectures, and emerging cyber threats.
- Soft Skills: Excellent analytical, leadership, stakeholder management, and communication skills.
Preferred Qualifications
- Experience in designing and implementing Secure Development Lifecycle (SDLC) processes.
- Ability to define business and technical project scope and lead teams independently.
- Hands-on experience with ITGC testing, vulnerability management, and regulatory compliance programs.
- Strong knowledge of cyber threat analysis, risk remediation, and enterprise security frameworks.
Why Deloitte
At Deloitte, you’ll join a leading cybersecurity practice that combines innovation, strategy, and advanced technology to help clients manage cyber risk and seize opportunities.
Benefits of joining Deloitte:
- Global exposure and cross-industry experience.
- Continuous learning through Deloitte University, certifications, and leadership programs.
- Inclusive culture fostering growth, collaboration, and professional excellence.
- Opportunities to lead high-impact cybersecurity and risk management projects.
Apply Now
If you are a seasoned Cyber Security Manager (GRC) ready to advance your career with Deloitte India, apply now to be part of a team that delivers strategic cybersecurity solutions.