T&T | Cyber - CST | Manager | ISO 27001

• Job requisition ID : 108231
• Location: Bengaluru
• Entity: Deloitte Touche Tohmatsu India LLP

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Lear more about Cybersecurity

Your work profile:

• ISMS Leadership: Lead the planning, implementation, and ongoing management of the ISO 27001 framework across the organization.

• Certification & Audit: Manage the internal audit schedule, coordinate with external auditors for certification and surveillance audits, and drive the organization towards successful ISO 27001 certification and recertification.

• Risk Management: Conduct risk assessments, vulnerability assessments, and penetration testing analysis. Develop and implement risk treatment plans and mitigation strategies.

• Policy & Procedure Development: Develop, review, and update Information Security policies, standards, and procedures to ensure alignment with ISO 27001 Annex A controls.

• Stakeholder Engagement: Work closely with IT, Legal, HR, and business units to ensure security controls are integrated into business processes.

• Training & Awareness: Develop and deliver security awareness training programs for employees to foster a culture of security.

• Compliance: Ensure ongoing compliance with other relevant standards such as SOC 2, NIST, and applicable data privacy laws (GDPR, DPDP Act).