Chief Security Officer

Your potential, unleashed.

India's impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organisations shaping the future of the region, and indeed, the world beyond.

At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.

The team

The Enabling Area – Information Technology team is responsible for building & maintaining different applications for Deloitte South Asia that focuses on providing employee experience.

Your work profile.

Primary purpose of the role:

• Oversee and manage regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks.
• Supervise and coordinate the monitoring and analysis of security alerts and incidents, and ensure prompt response to security breaches.
• Lead collaboration with IT and other departments to ensure security measures are integrated into all aspects of the organisation's operations.
• Manage and oversee the maintenance of security tools and technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Develop and conduct security awareness training for employees to promote a culture of security within the organisation.

Major responsibilities & deliverables:

• Develop and lead the implementation of comprehensive information security policies, procedures, and guidelines.
• Perform and oversee risk assessments and develop risk mitigation strategies.
• Prepare and present security reports to senior management and stakeholders.
• Stay up-to-date with the latest security trends, threats, and technologies, and advise on necessary updates and changes.
• Review and respond to client security questionnaire.
• Review and interpret information security clauses in Master service agreement, Engagement letters.
• Collaborate with legal teams, IT teams ,different business teams to align client requirements with internal information security policies.
• Contribute to internal security awareness and trainings.
• Stay up-to-date with the latest security trends, threats, and technologies.

Skills Required:

• Experience with cloud security (AWS, Azure, Google Cloud).
• Knowledge of network security, application security, and data protection.
• Familiarity with regulatory requirements and compliance frameworks.
• Experience in incident response and forensic analysis.
• Experience in strategic planning and project management.
• Ability to work independently and manage multiple information security related activities with timelines.
• Strong communication and interpersonal skills, with the ability to work effectively with cross-functional teams.
• Ability to handle sensitive information with discretion and maintain confidentiality.

Required qualifications include:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Professional certifications such as CISSP, CISM, CEH, or equivalent are desirable.

This role may involve travel for work.

Connect for impact

We are part of a global network of professionals who are solving complex problems and supporting communities around the world.

Empower to lead

We believe that everyone should have the opportunity to be a leader, regardless of their career level.

Inclusion for all

We value diversity and inclusion and strive to create a workplace where everyone feels welcome and valued.

Drive your career

We encourage our people to take ownership of their careers and to pursue opportunities that align with their passions and interests.

We offer flexible working arrangements and support our people in achieving a healthy work-life balance.