| Company | Deloitte |
| Job Title | Deputy Manager – Third Party Risk Management |
| Job Requisition ID | 112317 |
| Location | Delhi |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Practice | T&T | Cyber – CST |
| Domain | Cybersecurity / GRC / Third Party Risk Management |
| Experience | 6–9 Years |
| Education | Bachelor’s / Master’s Degree |
| Core Role | Cyber Security Advisory, GRC, Cyber Risk & Third Party Risk Management |
| Risk Assessments | Cybersecurity, Technology Risk, IT Audit, Compliance & Third-Party Assessments |
| Risk Domains | IT, OT, Cloud, IoT & Emerging Technologies |
| TPRM | Third-party onboarding, due diligence, risk assessment, contracting, monitoring, renewal & offboarding |
| Risk Frameworks | Develop CRMF, TPRM frameworks, governance models, policies, standards, SOPs & playbooks |
| Risk Management | Risk tiering, quantification, escalation, exception management & risk reporting |
| ISO 27001 | Implementation, gap assessment, internal assessment & certification readiness |
| Security Controls | IAM, Encryption, Vulnerability/Patch Management, Logging, Monitoring, Backup, Incident Response & Resilience |
| Frameworks & Standards | ISO 27001, NIST CSF, NIST SP 800-53, CIS Controls, PCI DSS, ISO 22301, ISO 27701, COBIT, SOC 2 & CSA CCM |
| Regulatory Compliance | Cybersecurity, outsourcing, information security, data protection, technology risk & operational resilience |
| Remediation | Identify gaps and develop remediation plans, transformation roadmaps & risk treatment strategies |
| Client Engagement | Workshops, stakeholder interviews, risk discussions & executive presentations |
| Project Management | Manage workstreams, timelines, resources, stakeholders and deliverable quality |
| Team Leadership | Lead, mentor and provide technical direction to consulting teams |
| Business Development | Proposal development, RFPs, solution design, client pursuits & cybersecurity advisory opportunities |
| Emerging Technology | AI-enabled tools, automation, analytics, continuous monitoring, AI Governance & AI Security |
| Key Skills | Cyber Risk, GRC, TPRM, Technology Risk, IT Audit & Information Security |
| Preferred Experience | Big 4, Management Consulting or Cybersecurity Consulting |
| Certifications | CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Auditor preferred |
| AI Certifications | ISO 42001, NIST AI RMF or equivalent preferred |
| Soft Skills | Analytical Thinking, Problem Solving, Stakeholder Management, Report Writing & Presentation |
| Ideal Candidate | Cybersecurity/GRC professional with 6–9 years of experience and strong expertise in TPRM, risk assessments, ISO/NIST frameworks and client-facing consulting |
