Cyber Security Architect - Hyderabad

To work in the innovative and creative cybersecurity team, a world-class operation renowned for its extensive expertise and experience. Collaborate with both business and technical teams to drive change and exert influence across the entire Deloitte landscape Utilize your skills to effect real-world impact. As Compliance Specialist, you will be responsible for monitoring, managing and closing existing compliance finding while also ensuring that internal controls are compliant through with Deloitte security policy & standard.

Work you'll do

As an Architect on the cybersecurity team, you will be responsible for…

Set the strategy for secure cloud adoption and expansion; evaluate emerging cloud technologies and threats; and lead proof-of-concept assessments of security tools, platforms, and controls.

Design and evolve cloud security architectures for infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) environments; define secure configurations for new and existing cloud initiatives.

Partner with solution architects, application teams, and development and operations (DevOps) teams to integrate identity and access management (IAM), encryption, firewall, logging, and security information and event management (SIEM) controls into cloud infrastructure.

Conduct cloud security risk assessments, identify vulnerabilities, recommend remediation, and support security reviews, audits, third-party assessments, and security contract reviews.

Lead response to cloud security incidents; coordinate investigations, resolution, and post-incident reviews; and maintain security policies, standards, baselines, runbooks, and escalation protocols.

Serve as a cloud security subject-matter advisor to business and technology leaders; mentor security professionals; and define delivery milestones, security metrics, and budget input for cybersecurity initiatives.

The team

At Deloitte, we’re all about collaboration. And nowhere is this more apparent than among our 2,000-strong internal services team. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas; Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience.

Location: Hyderabad

Shift Timings: 2:00 PM to 11:00 PM

Required:

10–12 years of experience in cybersecurity, information security, cloud security architecture, or cloud infrastructure engineering.

Bachelor’s or master’s degree.

Experience designing and implementing cloud security architectures and controls across IaaS, PaaS, and SaaS environments.

Experience securing workloads in one or more of Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).

Experience implementing or monitoring cloud security controls, including IAM, encryption, firewalls, logging, and SIEM integrations.

Experience conducting cloud security risk assessments, vulnerability analyses, security architecture reviews, and remediation planning.

Experience applying International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27001, ISO/IEC 27017:2015, ISO/IEC 27018:2014, or General Data Protection Regulation (GDPR) requirements to cloud environments.

Preferred:

Current certification in one or more of the following: Certified Cloud Security Professional (CCSP); AWS Certified Security – Specialty; Microsoft Certified: Azure Security Engineer Associate; Certified Information Security Manager (CISM); Certified in Risk and Information Systems Control (CRISC); or Certified Information Systems Security Professional (CISSP).

Experience developing and maintaining cloud security policies, standards, baseline configurations, procedures, runbooks, or incident-response playbooks.

Experience responding to cloud security incidents, coordinating investigation and resolution activities, and conducting post-incident reviews.

Experience assessing third-party vendors and SaaS providers through security posture assessments, contract-security reviews, or vendor risk reviews.

Experience leading proof-of-concept evaluations of cloud security tools, platforms, or controls.

Experience leading cloud security projects, including defining delivery milestones, reporting security metrics, and coordinating project-management activities.