T&T- Cyber: S&T- Cyber Security Controls- AM Job in Bengaluru at Deloitte

Deloitte is hiring for the role of T&T- Cyber: S&T- Cyber Security Controls- AM!

Responsibilities of the Candidate:

• Working knowledge in one or more security and privacy domains such as: security governance policies and procedures, risk management, compliance, access control, network security, security architecture, security incident response, disaster recovery, business continuity management, privacy and data protection
• Experience in leveraging industry standards and frameworks such as PCI-DSS, ISO/IEC 17799, ISO/IEC 27001, COBIT, ITIL, etc.
• Demonstrates in-depth knowledge of security and privacy controls and risk management process
• Possesses certifications such as CEH, ISO27001 LA/ LI, ISO22301 LA/LI, CISSP, CISA, CISM certification- preferred
• Should have basic understanding of cyber security controls such as encryption, hashing, CIA Traits, network security, data security, NIST etc
• Responsible for ISO 27001 based Information Security Management System implementation and sustenance
• Assess client information security posture, identify the gaps/risks in the existing environment and develop solutions to mitigate the identified gaps/risk
• Responsible to assist client in review / implement Information Security controls in areas as mentioned, but not limited to: Change management process, Incident management process, Backup process, User identity and access management, Antivirus management, SLA performance and monitoring, Media handling & Exchange of information, Physical and environmental Security, and Media & Information Handling
• Responsible to assist client in developing information assets inventory and classification
• Responsible for advising and assisting clients to develop and implement Information classification framework
• Conduct Information Systems audits covering IT infrastructure assets
• Advice clients on data privacy, data leakage prevention, identity and access management
• Serves as technical lead or subject matter specialist on security and privacy implementation projects, responsible for design, build, testing and deployment of solutions

Requirements:

• IT education or related fields
• PCI-DSS, ISO 27001 LA/LI, ISO 31000 LA/LI, ISO 22301 LA/LI, CISA, ITIL, or equivalent certification preferred
• CISSP, GSEC, GCIH, CEH, LPT, CCSK, certifications would be preferred