Deloitte | India Offices of the US

We are seeking a dedicated and experienced Assistant Manager to join our Cyber Governance, Risk, and Compliance team. The successful candidate will support cybersecurity risk oversight, control testing, and compliance activities across the organization, with a focus on incident response governance, risk management, security exceptions, and third-party risk management.

Work you'll do

As a GRC Assistant Manager on the Cyber Governance, Risk, and Compliance team, you will be responsible for:

• Lead cybersecurity risk governance activities, including risk assessments across applications, platforms, and infrastructure, and maintain the cyber risk register.
• Design and execute security control testing aligned to established cybersecurity frameworks and organizational requirements.
• Track remediation activities, perform compliance reviews, and report control effectiveness and risk issues to stakeholders.
• Conduct vendor cyber risk assessments and support third-party risk monitoring activities across the supplier lifecycle.
• Support incident response governance and exception management activities, including post-incident reviews, risk evaluations, and compensating control reviews.

The team

Cyber Governance, Risk, and Compliance (GRC) team. The successful candidate will play a pivotal role in managing cybersecurity risks, conducting control testing, and enhancing our overall cybersecurity posture, with a focus on incident response, risk management, security exception and third-party risk management.

Location: Hyderabad

Shift Timings: 6:30 AM to 3:30 PM

Qualifications

Required:

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
• 6-8 years of experience in cybersecurity governance, risk management, compliance, or control testing.
• Experience performing cyber risk assessments across applications, infrastructure, or technology platforms.
• Experience executing security control testing or compliance assessment activities.
• Experience with cybersecurity frameworks such as International Organization for Standardization (ISO) 27001, National Institute of Standards and Technology (NIST) Cybersecurity Framework, or Center for Internet Security (CIS) Controls.
• Experience managing remediation tracking, risk registers, exception management, or third-party risk assessment activities.

Preferred:

• Experience supporting incident response governance or post-incident review processes.
• Experience with third-party risk management programs and vendor security assessments.
• Experience with governance, risk, and compliance tools such as ServiceNow.
• Experience with cloud security, application security, or security architecture reviews.
• Experience applying Open Worldwide Application Security Project (OWASP) standards or DevSecOps practices.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) certification.