Senior Consultant

Job requisition ID :: 87828

Date: Sep 17, 2025

Location: Mumbai

Designation: Senior Consultant

Entity: Deloitte Touche Tohmatsu India LLP

Job Description: Senior Consultant – Information Risk Management (IRM) - Financial Services

Key Responsibilities

1. Risk Identification & Assessment

Conduct risk assessments across financial systems, including core banking, trading platforms, and payment gateways.

Identify vulnerabilities and threats specific to financial data, transactions, and customer information.

2. Regulatory Compliance & Advisory

Ensure compliance with financial regulations such as RBI guidelines, SEBI norms, PCI-DSS, and global standards like Basel III, GDPR, and SOX.

Advise clients on regulatory changes and their impact on information risk posture.

3. Policy & Framework Development

Develop and implement IRM frameworks aligned with financial industry standards.

Create policies for data protection, fraud prevention, and secure transaction processing.

4. Client Consulting & Stakeholder Engagement

Serve as a strategic advisor to banks, NBFCs, and financial institutions on IRM initiatives.

Lead client meetings, workshops, and executive briefings to communicate risk insights and solutions.

5. Security Controls & Governance

Design and evaluate controls for high-risk areas such as online banking, mobile payments, and financial APIs.

Support governance programs including third-party risk management and insider threat mitigation.

6. Technology & Tools Expertise

Utilize GRC platforms (e.g., RSA Archer, ServiceNow GRC) and financial risk tools.

Leverage data analytics and automation to monitor risk indicators and generate actionable insights.

7. Incident Response & Crisis Management

Lead investigations into security incidents involving financial data breaches or fraud.

Develop and test incident response plans tailored to financial operations.

8. Project Leadership

Manage IRM projects such as risk remediation, control implementation, and audit support.

Coordinate with IT, compliance, and business units to ensure project alignment and success.

9. Training & Awareness

Conduct training for financial staff on secure practices, phishing awareness, and regulatory compliance.

Promote a culture of risk awareness across financial operations.

10. Reporting & Documentation

Prepare risk dashboards, audit reports, and compliance summaries for senior management and regulators.

Maintain documentation for risk assessments, control testing, and remediation activities.

Required Qualifications

Bachelor's degree in Information Security, Computer Science, Finance, or related field.

Master's degree or MBA (preferred), especially with a focus on Risk Management or Financial Services.

Professional certifications such as:

CISA (Certified Information Systems Auditor)

CISM (Certified Information Security Manager)

CRISC (Certified in Risk and Information Systems Control)

CISSP (Certified Information Systems Security Professional)

ISO 27001 Lead Implementer/Auditor

5–8 years of experience in Information Risk Management, preferably within the financial sector.

Experience working with financial institutions, banks, NBFCs, or fintech companies.

Required Skills

Domain Expertise: Strong understanding of financial services operations, products, and regulatory landscape.

Risk & Compliance Knowledge: Familiarity with RBI, SEBI, PCI-DSS, GDPR, SOX, and Basel III requirements.

Technical Proficiency: Hands-on experience with GRC tools (e.g., RSA Archer, ServiceNow GRC), risk analytics, and cybersecurity controls.

Analytical Thinking: Ability to assess complex risk scenarios and propose actionable solutions.

Communication Skills: Excellent written and verbal communication for client interactions, reporting, and training.

Project Management: Capable of leading cross-functional teams and managing multiple IRM projects simultaneously.

Problem Solving: Strong troubleshooting and incident response capabilities.

Stakeholder Management: Experience engaging with senior leadership, regulators, and audit teams.