Deloitte: Information Security, Risk, and Governance Senior Analyst
Do you have the drive to engage in cyber security risk & compliance to protect organizations from potential security exposures or threats? If your answer is yes, we have the right opportunity for you!
Work you’ll do
Cyber Security Senior Analyst would be part of Cyber Security team and would actively engage in implementing our vendor information security risk management program for achieving firm’s GRC objectives. As part of this team, you will be assisting in reviewing and assessing vendor’s information security program, processes and controls to identify weaknesses in their information system and discover potential threats to Deloitte and its assets. You would be reporting assessment results to necessary stakeholders, following up on remediation plan, ensuring timely remediation and providing appropriate recommendations to the vendor for ensuring adequate protection of Deloitte information assets. You would collaborate and coordinate with various key stakeholders, both onshore and offshore, such as vendors, internal business clients, internal teams, SMEs and Cyber Security management.
You will also ensure optimal performance and tuning of Cyber Security program through continuous improvement.
You will also be participating in defining, creating and implementing Information Security
Awareness program and other firm initiatives for promoting overall Cyber Security objectives.
Monitoring external policy compliance, specifically on Deloitte vendors.
Responsible for reviewing and assessing vendor security controls to protect Deloitte facilities, systems (assets and networks) and data.
Responsible for ensuring vendors working within the framework of Deloitte security policies that is being clearly laid out for them.
Maintaining regular communications with vendor risk management team on progress status
Follow‐up with vendors and business teams to ensure timely remediation of assessment findings
Driving security awareness program across the organization and promoting cyber security firm initiatives.
Educational Qualification:
Bachelor’s Degree; 3 to 6 years of relevant experience
Work Experience
Good knowledge of information security principles, policies, processes and practices.
Good knowledge about security controls for cloud services.
Good to have information security program implementation and/or audit experience.
Good to have certifications such as ISO 27001, ISO 27002, ISO 22301, CEH, CISA
Required Skills
Should be a team player and should be comfortable working in teams.
Strong interpersonal and communications skills with the ability to communicate effectively at all levels.
The Team
The Cyber Security team works behind the scenes to protect Deloitte practitioners as well as information assets at Deloitte. We take this protective role very seriously, while simultaneously ensuring Deloitte meets client, legal, and regulatory requirements.