| Job Detail | Full Information |
|---|
| Company | Deloitte Touche Tohmatsu India LLP |
| Job Title | Assistant Manager – IT Audits |
| Job Requisition ID | 111186 |
| Department | Cyber Strategy & Transformation (Cyber CST) |
| Service Line | Technology & Transformation |
| Location | Chennai (as listed in the job details; the job title mentions Bengaluru) |
| Experience Required | Not specified in the provided job description |
| Educational Qualification | Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience |
| Job Overview | Implement and maintain Information Security Management Systems (ISMS), assess cybersecurity risks, evaluate security controls, and help clients improve their information security posture. |
| ISO 27001 & ISMS | Implement and sustain ISO 27001-based ISMS; assess security posture, identify gaps and risks, and recommend mitigation measures |
| IT Security Controls | Review and implement change management, incident management, backup, identity and access management, antivirus, SLA monitoring, physical security, and information-handling controls |
| Risk Assessment & Compliance | Conduct IT system, application, and network security assessments; perform risk assessments and gap analyses against ISO 27001, NIST CSF, PCI-DSS, and related frameworks |
| Third-Party Risk Management | Assess vendor risks and evaluate risks arising from outsourcing and third-party relationships |
| Security Governance | Develop information classification frameworks, security policies, procedures, and risk mitigation strategies |
| Cybersecurity Domains | Information security, regulatory compliance, security governance, risk management, access control, network security, security architecture reviews, IT General Controls, and third-party risk |
| Project Responsibilities | Lead or support security and privacy implementation projects, including solution design, build, testing, and deployment |
| Client Management | Manage day-to-day client relationships, work independently with limited supervision, and understand complex business and IT processes |
| Business Development | Contribute to proposals, identify opportunities for additional client work, improve engagement economics, and support service-line business development |
| Team & Practice Development | Support recruitment, professional retention, staffing, people development, and practice improvement initiatives |
| Required Technical Knowledge | Cybersecurity controls, risk management processes, security frameworks, IT audits, and compliance standards |
| Preferred Certifications | CISSP, CISA, CEH, or CRISC |
| Key Skills | Analytical thinking, problem-solving, communication, collaboration, and knowledge of emerging cyber threats and regulatory requirements |
| Salary | Not specified in the provided job description |
