Cyber Strategy Consultant Job in Gurgaon at Deloitte

Deloitte is hiring for the role of Cyber Strategy Consultant!

Responsibilities of the Candidate:

• Develop, implement, and maintain risk and governance frameworks.
• Conduct security risk assessments of third-party vendors and service providers.
• Define TPRM frameworks and integrate them into the overall risk management program.
• Perform cybersecurity maturity assessments using established frameworks such as NIST CSF, NIST-800-53, ISO 27001
• Understand and evaluate application security architectures, including secure SDLC practices, threat modelling and secure coding standards.
• Plan, execute, and report on comprehensive IT and OT security audits.
• Responsible to assist client in review / implement Information Security controls in areas as mentioned, but not limited to: Change management process, Incident management process, Backup process, User identity and access management, Antivirus management, SLA performance and monitoring, Media handling & Exchange of information, Physical and environmental Security, and Media & Information Handling.
• Support PCI DSS assessments and gap analysis.
• Provide guidance for remediation efforts to ensure ongoing compliance.
• Demonstrates understanding of complex business and information technology management processes.
• Ensure compliance with cybersecurity guidelines and regulations issued by RBI, SEBI, IRDA, BCAS, NCIIPC, and other relevant bodies.
• Track evolving regulatory requirements and integrate changes into the cybersecurity program.
• Understanding of cloud service models and security controls across major platforms (AWS, Google Cloud, Azure).
• Plan and execute ITGC control testing covering areas such as access management, change management, and operations controls. Identify control gaps and support remediation efforts.

Requirements:

• B. E/ B-Tech (Tier 1/2) or master’s degree in information security, Computer Science, or a related field
• Professional certifications such as CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI, ISO 31000 LA/LI, ISO 22301 LA/LI, CISA, ITIL or PCI QSA are preferred.
• 2-3 years of relevant experience in cybersecurity consulting, risk management, and compliance.
• In-depth knowledge of security frameworks and standards (e.g., NIST, ISO 27001, COBIT).
• Strong analytical, communication, and stakeholder management skills