Assistant Manager, Cybersecurity Architecture
Deloitte
Position Summary
Assistant Manager, Security Architecture
As part of the Secure Design team, you will help ensure cybersecurity requirements are embedded throughout the lifecycle of business applications, enterprise platforms, cloud services and technology initiatives, with particular focus on Microsoft 365, collaboration and security platforms, identity services, and enterprise connectors and integrations. You will complete assigned secure design reviews, analyze testing and vulnerability results, document security requirements and risks, and work with business and technology stakeholders to support consistent, risk-based decisions.
This is primarily a security architecture, risk assessment and design review role. You will not typically execute security testing directly. Instead, you will review evidence and results, assess associated risks, recommend remediation and support governance decisions through the SSDLC and technology change-management processes.
Work you'll do
Key responsibilities include:
SSDLC Operations & Delivery
- Support end-to-end SSDLC activities for assigned Technology pillar applications, platforms and initiatives, tracking agreed actions, deliverables and timelines.
- Perform cybersecurity design reviews and risk assessments for new and existing applications, cloud services, SaaS solutions, enterprise platforms and automation initiatives.
- Define and document functional and non-functional cybersecurity requirements and confirm that applicable requirements are incorporated into solution designs before implementation.
- Apply risk-based analysis to design decisions; clearly document security risks, recommendations and required actions; and support exceptions and remediation activities through established governance processes.
- Provide practical guidance on secure design principles and SSDLC requirements, helping delivery teams embed proportionate security requirements early and throughout the technology lifecycle.
- Review security testing and vulnerability findings, assess business impact and remediation priority, and work with delivery teams to progress appropriate treatment.
- Support architecture and configuration reviews across Microsoft 365 capabilities, including Microsoft Teams, SharePoint Online, OneDrive, Exchange Online, Microsoft Entra ID, Microsoft Purview and Microsoft Defender.
- Review enterprise connectors, APIs, SaaS integrations, add-ins and low-code or automated workflows for data exposure, authentication, authorization, third-party access, monitoring and resilience risks.
- Assess platform security considerations including tenant configuration, privileged administration, conditional access, information protection, data loss prevention, external sharing, audit logging and secure third-party integration.
- Evaluate security and collaboration platforms for secure integration, data handling, lifecycle management and alignment with enterprise architecture and cybersecurity requirements.
- Build effective working relationships with business, technology, architecture, engineering, platform, DevSecOps and cybersecurity stakeholders across Deloitte Global and the wider Deloitte network.
- Communicate technical and security issues through clear, business-relevant narratives and escalate material risks or delivery concerns where appropriate.
- Represent Cybersecurity in Change Advisory Board meetings and related governance forums, reviewing proposed changes against cybersecurity policies, standards, identified risks and required security testing.
- Maintain accurate review records, operational metrics, knowledge materials and activity tracking that support consistent Secure Design service delivery.
- Contribute to improvements in Secure Design processes, controls, templates and ways of working.
- Support the responsible use of AI and automation to improve review quality, consistency and efficiency while maintaining appropriate human judgement and governance.
- Review AI-enabled solutions and automated workflows to identify cybersecurity risks and determine applicable security requirements.
- Share knowledge and practical guidance with colleagues and engage specialists to strengthen delivery quality and technical capability.
At Deloitte, we’re all about collaboration. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas: Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience.
Location: Hyderabad
Shift Timings: 11 AM to 8 PM IST
Qualifications
Required:
- Bachelor's degree in computer science, cybersecurity, another technology-related field, or equivalent education and relevant experience.
- 6-8years’ total experience. Minimum four years of relevant experience in cybersecurity architecture, secure solution design, application security, technology risk assessment, or related discipline.
- Experience working in a complex organization and collaborating across multiple teams and stakeholder groups.
- A working knowledge of SSDLC or secure software development lifecycle practices.
- Ability to interpret application security and infrastructure testing results and translate findings into risk-based recommendations.
- Understanding of common applications, software, cloud, and infrastructure vulnerabilities.
- Familiarity with OWASP guidance and vulnerability-risk concepts, including severity and remediation prioritization.
- Knowledge of security controls used across applications and infrastructure, such as secure coding practices, web application firewalls, application gateways, firewalls, servers, and virtualized technologies.
- Experience with technology change-management or risk-governance processes.
- Strong written and verbal communication, stakeholder-management, analytical, and problem-solving skills.
- Ability to manage competing priorities and meet deadlines in a fast-paced, collaborative environment.
Preferred Skills And Experience
- Experience with Microsoft 365, Azure or identity services and the security considerations associated with their architecture, configuration and integration.
- Exposure to collaboration and security capabilities such as Microsoft Teams, SharePoint Online, OneDrive, Exchange Online, Microsoft Entra ID, Microsoft Purview or Microsoft Defender.
- Experience assessing connectors, APIs, SaaS integrations, low-code solutions or workflow automation for cybersecurity and data-protection risks.
- Exposure to SAST, DAST, IAST, penetration testing or software composition analysis, and familiarity with tools such as Snyk, Contrast, Fortify, Onapsis, Mend or comparable platforms.
- Knowledge of AI technologies and associated security and governance considerations.
- Experience using ServiceNow or a comparable workflow and tracking platform, with familiarity with ITIL-based service management and change control.
Our purpose
Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.
Our people and culture
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.
Professional development
At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .
Benefits To Help You Thrive
At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Requisition code: 372939