In your capacity as an Assistant Manager within the Global Cybersecurity Governance, Risk & Compliance (GRC) Audit & Certification (A&C) team at Deloitte Technology (DT), you support DT in achieving and sustaining compliance with external standards, including ISO 27001:2022, SOC 2, and other relevant information security frameworks and standards.
Work you'll do
As an Assistant Manager, Cyber Engineering on the Global Cybersecurity Governance, Risk & Compliance (GRC) Audit & Certification team, you will be responsible for:
Preparing audit scope, statements of applicability, and supporting documentation for internal and external audits
Planning and coordinating audit activities across stakeholders, control owners, and service assurance teams
Reviewing control design and operating effectiveness across the Information Security Management System (ISMS)
Gathering, reviewing, and validating audit evidence; collaborating with auditors through report finalization and issue resolution
Supporting remediation planning, management responses, and closure of identified audit and compliance issues
Contributing to risk assessments, ISMS management reviews, governance forums, and continuous improvement initiatives that reduce operational risk
The team
The Global Cybersecurity Governance, Risk & Compliance (GRC) Audit & Certification team helps Deloitte Technology maintain and strengthen alignment with external audit, certification, and information security requirements. The team works across stakeholders to support control maturity, evidence readiness, audit coordination, and continuous improvement of cybersecurity governance processes.
Location: Hyderabad
Shift Timings: 11 AM to 8 PM
Qualifications
Required:
Bachelor’s degree or equivalent
One of the following certifications: ISO 27001 Lead Auditor, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP)
7+ years of experience in information security management, risk management, and audits
4+ years of experience auditing at least one of the following standards: ISO 27001, ISO 27017, or SOC 2
Experience conducting internal and external audits
Experience supporting audit activities from planning through closure
Experience with audit tools and automation
Preferred:
Experience working with external auditors, including BSI, TUV, or other global quality registrars
Experience supporting complex global operations in large enterprises
