Assistant Manager - CyberSecurity Specialist/CISO/ITS (Assurance)

Your opportunity

To work in the innovative and creative CISO team. A world class operation with extensive knowledge and experience. Interfacing with business and technical teams and bringing about change and influence across the whole world of Deloitte. Apply your skills here to make things happen. You will be part of a great team that are passionate about our work in serving a great purpose.

Work you’ll do

As a CyberSecurity Specialist (Assurance) you will.

·       Support Business Lines/Project teams through the Globally mandated Secure Service Development Lifecycle (SSDLC) when introducing new services and systems, or changes to existing services and systems, whilst also providing relevant information security control requirements.

·       Define security non-functional requirements for projects and ensure that they are fulfilled prior to handing over to operations/BAU.

·       Liaise with the Information Security testing team to ensure that code reviews, application scanning and infrastructure scanning is conducted as part of CS assurance process.

·       Develop and present information related risks to Senior Manager – IS Risk and Assurance and the CISO

·       Working and collaborating with the wider UK Information Security team, UK Deloitte Business Security, UK IT Services, NSE, and Global Information Security and Risk teams.

·       Representation at the Change Advisory Board (CAB) to review change requests presented.

·       Evaluate and assess ITGC or Information Security controls.

·       Evaluate existing processes to understand inefficiencies or ineffectiveness involved. This includes reviewing the design adequacy & operational effectiveness of BAU processes.

·       Should be able to work on concurrent change initiatives.

·       Must showcase Effective stakeholder management as a part of role responsibility.

·       Seek feedback from the audience and incorporate it to come up with win-win solutions.

·       Clearly demonstrate how changes in a process will bring about improvements.

·       Be a self-starter, could problem solve, identifying issues and solutions options with minimal oversight and handholding.

·       Create a business case that caters to different audiences (mid-level & senior management).

Your professional experience/Qualifications

·       6-8 Years of Experience.

·       An Information Security qualification e.g., CISSP, CISM, CRISC CCSP, CEH or equivalent desirable.

·       Graduation / master’s in information security or computers are desirable but not essential.

·       Demonstrable knowledge of good security practices ensuring adherence to security concepts of confidentiality, integrity, and availability.

·       Demonstrable experience in an information security or risk management role that includes tasks such as carrying out risk assessments, risk assurance activities, documentation.

·       Have a demonstrable experience in proactively taking responsibility and owning, following up and resolving issues in such a way that positively impacts team delivery and inspires rest of team.

·       Have some knowledge of OWASP top ten vulnerabilities, tools and methodologies.

·       Working knowledge on SSDLC process.

·       Basic understanding of Project Management principles.

·       Have knowledge and skills to manage penetration/vulnerability testing processes and remediation.

·       Have excellent persuasion, influencing & interpersonal skills.

·       Have an understanding and experience of Risk management process.

·       Can think methodically and logically and have well-honed communication skills.

·       Possess exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills.

·       Knowledge on industry standards such as ISO27001/02, GDPR, Cyber Essentials etc..

Your work, your choice

In the CISO team we are results focused and believe in excellence in respect in all aspects of our work and interaction with each other. We make full use of technologies that help support different ways of working. At Deloitte we believe the best impact is the value we add, not the hours we sit at our desk. We, therefore, carefully consider agile ways of working, both formal and informal, that allow for the best impact for our people and our clients. If the working pattern you are looking for is not specifically indicated below, we are happy to discuss alternative arrangements.

Location: Hyderabad

Timings: 12 PM to 9 PM

How you’ll grow

At Deloitte, we’ve invested a great deal to create a rich environment in which our professionals can grow. We want all our people to develop in their own way, playing to their own strengths as they hone their leadership skills. And, as a part of our efforts, we provide our professionals with a variety of learning and networking opportunities—including exposure to leaders, sponsors, coaches, and challenging assignments—to help accelerate their careers along the way. No two people learn the same way. So, we provide a range of resources including live classrooms, team-based learning, and eLearning. DU: The Leadership Center in India, our state-of-the-art, world-class learning Center in the Hyderabad offices is an extension of the Deloitte University (DU) in Westlake, Texas, and represents a tangible symbol of our commitment to our people’s growth and development. Explore DU: The Leadership Center in India

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.

Deloitte’s culture

Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture that is inclusive, invites authenticity, leverages our diversity, and where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte.

Corporate citizenship

Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities.  We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.  Learn more about Deloitte’s impact on the world.