| Company | Deloitte |
| Job Title | Manager – Third Party Risk Management |
| Job Requisition ID | 112817 |
| Location | Delhi |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Practice | T&T | Cyber – CST |
| Domain | Cybersecurity / GRC / Third Party Risk Management |
| Experience | 8–12 Years |
| Education | Bachelor’s / Master’s Degree |
| Core Role | Cyber Security Advisory, GRC, Cyber Risk & Cyber TPRM |
| Cyber Risk Management | Lead CRMF programs, enterprise cyber risk assessments and governance initiatives |
| TPRM Lifecycle | Vendor identification, inherent risk assessment, tiering, due diligence, control assessment, remediation, monitoring, reassessment & offboarding |
| TPRM Frameworks | Develop policies, procedures, SOPs, operating models, governance structures, methodologies & playbooks |
| Risk Tiering | Define risk scoring, segmentation, escalation, exception management and risk acceptance |
| Third-Party Assessments | Assess vendors across information security, privacy, cloud, application security, BCP, incident response, vulnerability & access management |
| Security Controls | Encryption, Data Protection, IAM, Vulnerability Management, Incident Response & Business Continuity |
| Frameworks & Standards | ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2 & CSA CCM |
| Regulatory Compliance | Outsourcing, information security, data protection, technology risk & operational resilience |
| Risk Advisory | Advise senior stakeholders on cyber risk, critical vendors, concentration risk, governance and compliance |
| Remediation | Identify risks and gaps and develop risk-based remediation and treatment strategies |
| Executive Engagement | Lead workshops, steering committees, stakeholder discussions and board-level presentations |
| Engagement Management | Manage multiple projects, resources, timelines, quality and stakeholder expectations |
| Team Leadership | Mentor, coach and develop consulting teams across Cyber GRC, TPRM and Technology Risk |
| Deliverables | TPRM assessments, risk registers, vendor profiles, remediation trackers, dashboards, roadmaps & management presentations |
| Client Management | Build senior-level relationships and act as a trusted cybersecurity advisor |
| Business Development | Proposals, RFPs, solution design, client presentations, thought leadership & account development |
| Emerging Technology | AI-enabled tools, automation, analytics, continuous monitoring, AI Governance & AI-related cyber risks |
| Key Skills | Cyber Risk, GRC, TPRM, ISO 27001, Cybersecurity Governance & Security Assessments |
| Preferred Experience | Big 4, Management Consulting or Cybersecurity Consulting |
| Certifications | CISSP, CISM, CISA, CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor preferred |
| AI Certifications | ISO 42001, NIST AI RMF or equivalent preferred |
| Soft Skills | Strategic Thinking, Problem Solving, Stakeholder Management, Report Writing & Executive Presentation |
| Ideal Candidate | Senior cybersecurity professional with 8–12 years of experience, strong TPRM/GRC expertise and proven ability to lead complex cybersecurity transformation engagements |
