Deloitte | India Offices of the US

Cyber: Third Party Cyber Risk Services – Consultant (Solution Delivery Associate)

Work You’ll Do

• Perform ongoing third-party cyber risk assessments
  Help clients identify and evaluate complex business and technology risks related to their third parties, and provide recommendations for managing those risks.
• Provide periodic status updates
  Communicate potential risks and delays to project delivery to the project manager and client.
• Assist in the selection and tailoring of risk management approaches
  Support delivery of third-party cyber risk assessment services by selecting and customizing methods and tools.

Required Skills

• 2 to 3 years of relevant experience in information security
• Good understanding of information security and risk frameworks/standards (e.g., ISO 27001/2, NIST 800 series, PCI-DSS)
• Knowledge of key risk areas such as cyber risk, compliance risk, and regulatory risk
• Demonstrated expertise in one or more of the following cyber risk domains:
• Security Governance and Management
• Security Policies and Procedures
• Application Security Controls
• Access Controls
• Network Security Operations
• Security Architectures
• Identity Management
• Disaster Recovery & Business Continuity
• Incident Response
• Risk Management
• Privacy and Data Protection
• Encryption
• Experience with internal controls, risk assessments, business process and internal IT control testing, or operational auditing
• Excellent verbal and written communication skills
• Excellent interpersonal skills

Preferred Skills

• CISSP/CISA (or equivalent certification)
• Good understanding of legal and regulatory requirements around information security and data privacy (e.g., OCC Bulletin 29, FFIEC, HIPAA Security/Privacy)
• Prior consulting experience
• Experience with internal controls, risk assessments, business process, and internal IT control testing or operational auditing

Qualification

• Bachelor’s or Master’s degree in information technology or a related field