| Job Detail | Full Information |
|---|
| Company | Deloitte Touche Tohmatsu India LLP |
| Job Title | Consultant – ISO 27001 |
| Job Requisition ID | 111185 |
| Department | Cyber Strategy & Transformation |
| Service Line | Technology & Transformation |
| Location | Bengaluru, Karnataka, India |
| Experience Required | Not specified in the provided job description |
| Educational Qualification | Bachelor’s degree in Computer Science, Information Security, or a related field; equivalent experience may be considered |
| Job Overview | Support clients in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS), assessing cybersecurity risks, and strengthening information security controls. |
| ISO 27001 & ISMS | Implement and maintain ISMS, assess information security posture, identify control gaps, and recommend risk mitigation solutions |
| IT Security Controls | Review and implement change management, incident management, backup, identity and access management, antivirus, SLA monitoring, physical security, and information-handling controls |
| Security Assessments | Assess IT systems, applications, and networks to identify vulnerabilities and security risks |
| Risk Assessment & Compliance | Perform risk assessments and gap analyses against ISO 27001, NIST Cybersecurity Framework (CSF), PCI-DSS, and other relevant standards |
| Third-Party Risk Management | Conduct vendor risk assessments and evaluate information security risks associated with outsourcing |
| Information Classification | Advise clients on developing and implementing information classification frameworks |
| Cybersecurity Domains | Information security, regulatory compliance, security governance, risk management, access control, network security, security architecture reviews, IT General Controls, and third-party risk management |
| Project Responsibilities | Support security and privacy projects across solution design, implementation, testing, and deployment |
| Client Management | Coordinate with client stakeholders, manage day-to-day client relationships, and work independently with limited supervision |
| Business Development | Contribute to proposals, identify additional client opportunities, and support service-line business development |
| Team & Practice Development | Participate in recruitment, professional development, retention, and practice improvement initiatives |
| Required Technical Knowledge | ISO 27001, cybersecurity controls, risk management, security policies, compliance assessments, and information security frameworks |
| Preferred Certifications | CISSP, CISA, CEH, or CRISC |
| Preferred Standards Knowledge | NIST SP 800-53, CIS Controls, ISO 27001, and related security standards |
| Key Skills | Analytical thinking, problem-solving, communication, cross-functional collaboration, and awareness of current cyber threats and regulatory requirements |
| Salary | Not specified in the provided job description |
