Information Security Manager (CISSP)

About the role

The Information Security Manager will lead the security function for Deloitte's Enabling Areas – Information Technology team, ensuring the protection of employee experience applications and client data. You will work closely with technology and business teams to embed security controls across the organization.

Key responsibilities

• Manage client security assessments, due‑diligence responses and security clauses in contracts.
• Maintain and enforce information security policies, standards, and governance frameworks.
• Ensure compliance with ISO 27001, NIST, privacy regulations and other statutory requirements.
• Oversee vulnerability management, penetration testing, remediation, and cloud/infrastructure security posture.
• Lead incident response, investigations, recovery actions and reporting.
• Conduct security architecture reviews, threat modeling and IAM assessments.
• Collaborate with technology teams to identify and mitigate cyber risks.
• Maintain audit evidence, security documentation and compliance records.
• Deliver security awareness, cyber‑resilience training and monitor security metrics.

Required profile

• 8‑12 years of experience in information security, cyber security or related fields.
• Relevant certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor/Implementer.
• Bachelor’s degree in Information Technology, Computer Science or a related discipline.
• Experience reviewing MSA clauses and responding to client security questionnaires.

Required skills

• ISO 27001 and NIST frameworks.
• Vulnerability management and penetration testing.
• Incident response and security operations.
• Cloud security and security architecture.
• Threat modeling and Identity & Access Management (IAM).
• AI security, Generative AI governance and technology risk management.

What we offer

• Hybrid working model with flexibility across Mumbai, Delhi, Pune and Bengaluru.
• Opportunities to work on high‑impact security projects for a global professional services firm.