Analyst, Bangalore

About the Role

We are seeking a skilled IT Security professional to support vendor risk and client assurance activities for Deloitte Technology Canada. In this role, you will help assess third-party security and operational risk, respond to client assurance requests, and support audit and contractual security review activities. The role requires experience working across security, legal, procurement, audit, and business stakeholders to help drive timely and effective risk management outcomes.

Key Responsibilities

• Assess security, technology, and operational risks associated with third-party vendors and service providers.
• Complete client security questionnaires and coordinate responses to client audit requests.
• Review security clauses in master service agreements and statements of work in collaboration with Legal and business stakeholders.
• Support SOC 2 and SOC 1 audit activities, including evidence gathering and control validation.
• Coordinate with internal teams, vendors, clients, procurement, legal, and audit stakeholders to support timely completion of assurance activities.

Requirements & Tech Stack

• Bachelor’s degree or equivalent
• Experience conducting vendor risk assessments for third-party providers
• Experience completing client security questionnaires and supporting client audit requests
• Experience reviewing security clauses in master service agreements and statements of work
• Experience supporting SOC 1 and SOC 2 audits, including audit evidence collection and control validation
• Experience with security and control frameworks such as NIST 800-53, ISO 27001, and information technology general controls
• Experience with cloud technologies and cloud security controls

Preferred Qualifications

• Industry certification such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Public Accountant (CPA), or similar
• Experience working with cross-functional stakeholders across security, legal, procurement, audit, and business teams
• Experience supporting assurance activities in a large enterprise environment

Location: Hyderabad

Shift Timings: 2 PM to 11 PM IST