📋 Job Details at a Glance 📍 Location Delhi, India 🏢 Company Deloitte Touche Tohmatsu India LLP 👥 Experience 0-2 years 🎓 Qualification Relevant technical qualification and demonstrated shipping experience 📅 Eligible Batch 2023, 2024, 2025, 2026 📄 Job Type Full Time 💰 Salary Not Disclosed 🏢 Industry Technology 🛠 Key Skills ISO 27001 NIST PCI DSS access management encryption logging and monitoring vulnerability management patch management Deputy Manager | Third Party Risk Management at Deloitte Touche Tohmatsu India LLP — Full Details & How to Apply Deloitte Touche Tohmatsu India LLP is hiring a Deputy Manager | Third Party Risk Management in Delhi, India with a focus on conducting technical control assessments and security audits across client environments. This role offers hands-on exposure to key cybersecurity standards and risk management tools, including ISO 27001 , NIST , and PCI DSS . This Deputy Manager | Third Party Risk Management role involves leading third-party risk assessments, performing technology risk reviews, and executing security audits. The responsibilities directly support client security by evaluating vendor controls and developing policies for third-party risk management. Candidates will engage with real-world technical environments and apply skills in access management , encryption , logging and monitoring , vulnerability management , and patch management . Deloitte Touche Tohmatsu India LLP recruitment for this position emphasizes technical expertise and practical experience. The role is part of the firm’s cyber strategy and transformation initiatives, where candidates will work on client-facing risk assessments. The company specializes in risk management and cybersecurity solutions within the technology industry, with this role embedded in its Delhi-based operations. 2023, 2024, 2025, 2026 graduates are eligible. Applicants must hold a relevant technical qualification and demonstrated shipping experience and have a 0-2 years experience background. The salary for this position is Not Disclosed . Candidates will gain practical experience with ISO 27001 , NIST , PCI DSS , access management , encryption , logging and monitoring , vulnerability management , and patch management . This role provides foundational experience in third-party risk management, which can lead to progression into senior risk or cybersecurity roles within audit, compliance, or technology services. 📊 Role Difficulty: Low | Competition Level: Medium | Fresher Friendly: Yes NexisGrow.com features this opportunity as part of its curated tech job listings. All details are sourced from the official job posting. Apply online before the opportunity closes. Job Role & Responsibilities The Deputy Manager | Third Party Risk Management at Deloitte Touche Tohmatsu India LLP executes technical security assessments for client third-party vendors, ensuring compliance with ISO 27001 , NIST , and PCI DSS standards through structured, audit-driven processes. This role directly manages vendor lifecycle controls and technical risk evaluations using measurable security metrics. Conducts technical control assessments of access management systems to validate identity governance, role-based permissions, and least privilege enforcement in client environments. Validates encryption mechanisms in third-party systems by evaluating key management, data-at-rest protection, and cryptographic protocol implementation against PCI DSS requirements. Reviews logging and monitoring configurations to ensure audit trails meet NIST SP 800-61 standards and support real-time threat detection and incident response. Performs vulnerability management evaluations using tools like Qualys or Tenable to identify misconfigurations, outdated software, and exposed endpoints in vendor infrastructures. Executes patch management reviews to confirm timely updates across operating systems, applications, and firmware, ensuring alignment with ISO 27001 control A.12.1. Documents vendor onboarding and offboarding procedures, including access lifecycle, data handling, and compliance verification steps, in standardized Deloitte TPRM templates. Develops risk tiering methodologies using NIST CSF risk categories to assign risk levels based on data sensitivity, exposure, and regulatory obligations. Supports client-facing reporting structures that present risk findings, escalation paths, and remediation timelines using Deloitte Risk Dashboard formats and KPIs. This role requires direct ownership of technical risk evaluations, with each assessment contributing to measurable compliance outcomes and documented vendor risk exposure metrics across ISO 27001 , NIST , and PCI DSS frameworks. Required Skills & Technical Competencies Candidates must demonstrate proficiency in cybersecurity standards and technical controls, with a strong focus on ISO 27001 , NIST , and PCI DSS as foundational tools for third-party risk evaluation. These skills are applied in real-time assessments of vendor security posture and control implementation. Technical Skills ISO 27001 — entry — used to evaluate compliance with control objectives during third-party risk assessments, particularly for access control and incident management. NIST — entry — applied in constructing risk assessment frameworks and validating technical controls using NIST SP 800-53 and NIST CSF guidelines. PCI DSS — entry — used to validate payment data security controls in vendor systems, ensuring adherence to specific data handling and encryption mandates. Access management — entry — applied to assess identity provisioning, role assignment, and session management in third-party environments using tools like Okta or Microsoft Entra ID . Encryption — entry — evaluated in data-at-rest and data-in-transit configurations, with focus on algorithm strength and key lifecycle management in vendor systems. Logging and monitoring — entry — assessed through configuration of SIEM tools such as Splunk or IBM QRadar to ensure audit trail completeness and real-time alerting. Vulnerability management — entry — implemented using Qualys or Tenable scans to identify and prioritize security gaps in third-party infrastructure. Patch management — entry — evaluated for timeliness and coverage of OS and application updates, aligned with ISO 27001 control A.12.1. When preparing a resume, emphasize hands-on experience with ISO 27001 , NIST , and PCI DSS frameworks, and list specific tools like Qualys , Okta , or Splunk to demonstrate technical exposure in real assessments. Eligibility Criteria This role is designed for freshers with a relevant technical qualification and demonstrated exposure to cybersecurity frameworks, particularly in access management , encryption , or vulnerability management contexts. It targets students from 2023 to 2026 with foundational technical training. Must hold a relevant technical qualification such as B.Tech in Computer Science, Information Security, or a related field. Must be from eligible batches: 2023, 2024, 2025, or 2026 . Experience requirement is 0–2 years , including internships or project work in cybersecurity or risk management. Academic performance is not specified, but a technical project or lab work in access control or encryption is expected. Must have a portfolio showcasing technical risk assessments, such as a third-party access audit or vulnerability scan report . Must demonstrate understanding of ISO 27001 or NIST controls through academic work or project documentation. Documentation & Portfolio Requirements Your resume must include a clear section on technical projects, with specific details such as tools used ( Qualys , Okta ), controls evaluated, and outcomes measured (e.g., “identified 12 misconfigurations in access management ”). For this role, prioritize including a technical project that demonstrates evaluation of access management or vulnerability management using a real tool like Qualys or Okta , and explicitly link it to ISO 27001 or NIST standards. Salary for Deputy Manager | Third Party Risk Management at Deloitte Touche Tohmatsu India LLP 💰 Compensation Not Disclosed The advertised compensation for the Deputy Manager | Third Party Risk Management role at Deloitte Touche Tohmatsu India LLP is Not Disclosed . The exact in-hand figure and any additional components are confirmed by the company during the offer or HR discussion stage. Recommended Courses & Preparation Tips for Deputy Manager | Third Party Risk Management Upskilling with the right resources significantly enhances your chances of selection for this specialized role in risk management. Recommended Courses & Resources PCI DSS — This course provides essential knowledge on compliance standards crucial for third-party risk management. KodNest — Offers practical insights into risk assessment methodologies relevant to the role. Boost your profile with relevant certifications at NexisGrow GetCertified — strengthen your application before you apply. Common Mistakes to Avoid ❌ Applying without demonstrating experience with ISO 27001 or NIST — Include relevant coursework or projects. ❌ Using a generic resume instead of tailoring it — Customize your resume to reflect the specific responsibilities outlined in the job description. ❌ Listing technologies like access management without detailing their application — Provide context on how you've used these technologies in previous roles. ❌ Ignoring the 0-2 years experience requirement — Ensure you meet the qualifications before applying. ❌ Adding unrelated skills or unsupported claims — Focus on relevant experiences to avoid keyword stuffing. ❌ Failing to verify the official Apply URL — Always check the provided link before submission. Before You Apply — Checklist ✅ Confirm the job title, company, location, work mode, and experience requirement. ✅ Check that the candidate meets the supplied qualification criteria. ✅ Verify eligibility against the supplied eligible batches and experience requirement. ✅ Add relevant supplied JD keywords naturally to the resume. ✅ Highlight projects or experience related to the supplied technologies and responsibilities. ✅ Remove unsupported technologies, achievements, or experience claims. ✅ Open and verify the supplied Apply URL before submitting the application. ✅ Save the job details, application date, and role-specific resume version for tracking. Resume Tailoring & ATS Keywords for Deputy Manager | Third Party Risk Management Optimizing your resume for ATS is crucial for standing out in the application process for this role. ATS Keywords to Include Third Party Risk Management ISO 27001 NIST PCI DSS Access Management Encryption Logging and Monitoring Vulnerability Management Patch Management Risk Assessment Security Audits Governance Frameworks Resume Tips for This Role Highlight the relevant technical qualification prominently on the resume. Emphasize experience with ISO 27001 , NIST , and other listed technologies. Include projects or internships that involved risk assessments or security audits. Use exact keywords from the job description naturally to align with ATS requirements. Avoid adding unsupported claims or unrelated technologies that cannot be substantiated. Build an ATS-optimized resume for this role using NexisGrow Resume Builder — free for all job seekers. Pro Tip: Avoid including unrelated skills or unsupported claims in your resume for this role. How to Apply for Deputy Manager | Third Party Risk Management at Deloitte Touche Tohmatsu India LLP Apply Now — Deloitte Touche Tohmatsu India LLP Open the official Apply URL and confirm the job title and company matches the position you're applying for. Prepare a resume that aligns with the required skills, responsibilities, qualifications, and experience outlined in the job description. Complete the official application form accurately, ensuring all information is truthful and avoiding unsupported claims. Submit the application and save the confirmation or application reference number if provided by the portal. Record the application date and monitor the official company portal or your registered email for updates. Applications are reviewed on a rolling basis — early submission is recommended. NexisGrow.com does not charge any fees for job applications. Deloitte Touche Tohmatsu India LLP Deloitte Touche Tohmatsu India LLP is a technology-focused firm based in Delhi, India, offering onsite services. It specializes in cyber strategy and transformation, particularly in third-party risk management. The role operates within a dedicated team executing assessments and audits for client environments. The team conducts technical control assessments across infrastructure, cloud, applications, and networks. They evaluate controls including access management , encryption , logging and monitoring , vulnerability management , and patch management . Assessments are aligned with ISO 27001 , NIST , and PCI DSS standards. This role supports the company’s focus on third-party risk management by developing policies, governance frameworks, and vendor lifecycle processes. It contributes to structured risk assessment and reporting aligned with industry best practices and regulatory expectations. Early-career professionals gain exposure to core cybersecurity frameworks and risk management practices. Hands-on experience with ISO 27001 , NIST , PCI DSS , and technical controls builds foundational knowledge in real-world risk assessment and compliance. Company Details Industry Technology Location Delhi, India Connect With Us Careers Apply Now Website 🔗 southasiacareers.deloitte.com Frequently Asked Questions Interview · Role · Salary · Growth ? Who can apply for this role? Eligibility Tap to expand + Answer Candidates with a relevant technical qualification and from eligible batches 2023, 2024, 2025, and 2026 can apply. ? What technical skills are most important for this role? Skills Tap to expand + Answer ISO 27001, NIST, PCI DSS, access management, encryption, logging and monitoring, vulnerability management, and patch management are crucial. ? What is the expected salary for this position? Salary Tap to expand + Answer Salary Display is Not Disclosed, which is the only salary information available. ? What should I expect after applying? Hiring Process Tap to expand + Answer The exact hiring stages are not specified in the job posting. ? How should I prepare for the interview? Preparation Tap to expand + Answer Review ISO 27001 and NIST frameworks, understand third-party risk management processes, prepare examples of relevant projects, practice common interview questions, and familiarize yourself with Deloitte's services. ? Is this role remote, hybrid, or onsite? Work Mode Tap to expand + Answer This role is onsite in Delhi. ? What career exposure can this role provide? Growth Tap to expand + Answer The role provides exposure to third-party risk management, security audits, and compliance with industry standards. ? What should I highlight in my resume for this role? Resume Tap to expand + Answer Highlight skills in ISO 27001, NIST, risk assessments, and any relevant technical qualifications or projects. ? Is there a last date to apply? Application Tap to expand + Answer Not specified in the job posting. ? Is there a probation period? Probation Tap to expand + Answer Not specified in the job posting. ? What is the work environment like for this role? Culture Tap to expand + Answer The role involves collaboration with engagement teams and focuses on executing assessments and audits. ? Can freshers apply for this role? Fresher Tap to expand + Answer Yes, freshers can apply as the experience requirement is 0-2 years. 🔗 Explore More on NexisGrow More jobs in Delhi Browse all Tech jobs Latest Fresher jobs More jobs at Deloitte Touche Tohmatsu India LLP Work From Home jobs Ready to Apply? Don't Miss This Opportunity! Apply only via the official link. NexisGrow.com charges zero application fees. 👉 Apply Now — Official Link NexisGrow.com does not charge any application or registration fees. Beware of fraudulent offers. Naukri ki baat, NexisGrow ke saath • NexisGrow.com