Deputy Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation
Deloitte (company site, opens in a new tab)5–8 yrsPuneOn-siteDirect career pageEst. 18–28 LPA
Posted on 4 Sept
Reach people at Deloitte
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Deloitte you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Conduct cyber capability and security control assessments across technology environments using frameworks like NIST CSF, ISO 27001, CIS Controls.
- Identify cybersecurity risks, control deficiencies, and transformation opportunities, supporting cyber maturity assessments and capability development roadmaps.
- Support cyber governance, risk management, assurance activities, and contribute to cyber transformation programs enhancing security posture and resilience.
Minimum Requirements
- 5-8 years of experience in Cybersecurity, Cyber Risk, Security Controls, Governance, Compliance, or Cyber Transformation.
- Knowledge and exposure to cybersecurity control frameworks such as NIST CSF, ISO 27001, and CIS Controls.
- Working knowledge of Microsoft Sentinel and Kusto Query Language (KQL) for security analysis and control validation.
- Location requirement: Pune.
Ideal Candidate Profile
- Experience in assessing and improving cybersecurity capabilities across identity, endpoint, network, cloud, and application security domains.
- Proven ability to analyze security telemetry, events, and control performance to recommend capability modernization and process improvements.
- Skilled at collaborating with multidisciplinary teams (technology, infrastructure, cloud, business) to implement cybersecurity improvements and support executive-level reporting.