Assistant Manager | Security Frameworks and Standards | Bengaluru | Cyber Strategy & Transformation
Deloitte (company site, opens in a new tab)BengaluruOn-siteDirect career pageEst. 15–28 LPA
Posted on 8 Sept
Reach people at Deloitte
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Deloitte you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Establish and maintain risk governance frameworks; lead cybersecurity maturity assessments and develop strategic roadmaps to strengthen security posture.
- Design and validate secure IT and OT architectures; oversee IT and OT security audits and IT General Controls (ITGC) testing including identifying gaps and managing remediation.
- Manage compliance and third-party risk assessments aligned with regulatory frameworks such as RBI, SEBI, IRDA, PCI DSS; lead cyber strategy projects and guide delivery teams.
Minimum Requirements
- Work Experience Required: Not explicitly mentioned in the JD.
- Experience with cybersecurity frameworks and standards such as NIST CSF, ISO 27001, PCI DSS, and regulatory compliance (RBI, SEBI, IRDA, BCAS).
- Certifications such as ISO27001 LA/LI, ISO22301 LA/LI, PMP, CISSP, CISA, or CISM preferred.
- Location: Bengaluru.
Ideal Candidate Profile
- Experienced in leading cybersecurity risk management and governance within complex IT and OT environments involving secure architecture design and compliance.
- Skilled in conducting comprehensive security audits, ITGC testing, and maturity assessments using standardized frameworks.
- Capable of managing client relationships and project delivery, tailoring cybersecurity strategies to business and regulatory requirements.