Assistant Manager | ISO:27001 | Delhi | Cyber Strategy & Transformation
Deloitte (company site, opens in a new tab)Delhi NCROn-siteDirect career pageEst. 18–30 LPA
Posted 21h ago
Reach people at Deloitte
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Deloitte you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own ISO/IEC 27001:2022-aligned ISMS and GRC activities, including risk assessments, control mapping, policies, audit readiness, and remediation tracking.
- Coordinate internal and external audits and third-party risk assessments; manage evidence, findings, and closure.
- Provide cybersecurity risk and security-posture reporting to CISO and management stakeholders, while supporting BCMS and cyber-resilience initiatives.
Minimum Requirements
- Work Experience Required: Not explicitly mentioned in the JD.
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.
- Cybersecurity GRC and information security knowledge, including ISO/IEC 27001:2022, ISMS implementation, risk management, and security controls; hands-on audit coordination, third-party risk assessments, policy development, and remediation tracking are required.
- Location: Delhi. Onsite or relocation requirements are not explicitly mentioned in the JD.
Ideal Candidate Profile
- Has a governance-and-assurance focus, with experience translating security risks and controls into audit evidence, policies, and tracked remediation.
- Can manage cybersecurity assessments and reporting across senior business, technology, audit, and third-party stakeholders.
- Can relate governance reporting to security operations and technologies such as VAPT, vulnerability management, DLP, SIEM/SOAR, MITRE ATT&CK, Microsoft Defender, Entra ID, and Intune.