Deloitte India
Cyber Consultant – GRC
- Location
- Mumbai
- Work mode
- See listing
- Experience
- 2–4 yrs exp
- Pay
- ₹8–14 LPA (Est.)
- Type
- Full-time job, Developer
- Added
- 11 November 2026
About this role
This Consultant role sits in Deloitte India's Cyber team in Mumbai. It focuses on data privacy, third-party risk management and governance, risk and compliance (GRC). The team helps clients manage information and technology risk and meet regulations such as DPDPA, GDPR and ISO/IEC 27001/27701. Day to day, you will run privacy and gap assessments, review vendors' security and privacy posture, and draft policies and compliance reports. You will also join client workshops and keep project documentation on track. The role needs 2–4 years of TPRM experience, so it suits early-career professionals rather than fresh graduates.
Deloitte India is hiring for Cyber Consultant – GRC, a full-time role based in Mumbai.
Who can apply: 2–4 yrs exp. Skills: DPDPA, GDPR, ISO 27001, Third-Party Risk Management, GRC.
Hirastra checked that this opening is live. Apply directly through the official posting; applying is always free.
What you'll do
- Support DPDPA, GDPR and other privacy compliance engagements, including gap, applicability and maturity assessments
- Assist with DPIAs, business impact assessments, data flow mapping and records of processing activities
- Conduct vendor due diligence, review questionnaires and evidence, and recommend risk mitigation
- Perform control assessments against DPDPA, ISO/IEC 27001 and ISO/IEC 27701 and identify compliance gaps
- Draft privacy and governance policies, procedures and client reports, and track remediation
- Participate in client workshops and prepare trackers, meeting minutes and status reports
What you need
- Bachelor's degree in Computer Science, Information Security, Engineering or a related field
- 2–4 years of experience in Third-Party Risk Management (TPRM)
- Understanding of data privacy principles, TPRM processes and GRC concepts
- Strong analytical and communication skills
Skills
- DPDPA
- GDPR
- ISO 27001
- Third-Party Risk Management
- GRC
"Est." = Hirastra's estimate based on market data, not an official figure.
All Deloitte India jobs and internships
More like this: IT jobs in Mumbai, Cyber security jobs for freshers, Jobs for B.Tech and BE freshers, Software developer jobs
Similar openings
See all jobs- NIST CSF
- ISO 27001
- CIS Controls
- Microsoft Sentinel
- KQL
Location: Pune
Experience: 2–4 yrs exp
Est. ₹10–16 LPA
Added
Deloitte
Consultant I – Cyber (XSOAR)
- Cortex XSOAR
- SOAR
- SIEM
- Python
- PowerShell
- Incident response
Location: Mumbai
Experience: 1–4 yrs exp
Est. ₹6–10 LPA
Added
Optiv
Associate Engineer
- Firewalls
- Network security
- Palo Alto Networks
- Fortinet
- Cisco ASA
Location: Bengaluru, Onsite
Experience: 2–4 yrs exp
Est. ₹6–10 LPA
Added
Lowe's IndiaApply by 24 Nov
Engineer, Information Security
- Java
- Spring Boot
- Python
- REST APIs
- OAuth 2.0
- OpenID Connect
- JWT
- Git
Location: Bengaluru, Onsite
Experience: 2+ yrs exp
Est. ₹12–20 LPA
Added
SISA Infosec
Application Security Associate Consultant
- Penetration testing
- Burp Suite
- OWASP Top 10
- Secure code review
- Nmap
Location: Bangalore
Experience: 2–4 yrs exp
Est. ₹5–9 LPA
Added
- UVM
- SystemVerilog
- ARM Architecture
- CPU Verification
- SoC
Location: Bengaluru
Experience: 2+ yrs exp
Est. ₹20–35 LPA
Added