Deloitte's Cyber Strategy team in Pune is hiring a Consultant for third-party (vendor) risk management engagements.
What the role involves:
- Running ISMS and third-party risk assessments and audits across people, process and technology
- Working with client compliance, audit and regulatory teams to identify and document requirements and obligations
- Finding gaps and risks and recommending improvements to policies, processes and standards
- Writing assessment and audit reports that cover information security risks, recommendations and compensating controls
- Managing client stakeholder expectations
What they look for: around 2+ years of relevant experience, a good understanding of vendor/supplier risk management, knowledge of data protection and privacy risks tied to third parties, and familiarity with control frameworks used for third-party risk.