Vendor Cyber Risk Assessment Service Manager - Hyderabad

Summary

Position Summary

Do you thrive on turning complex cybersecurity risks into practical, consistent action? Deloitte is seeking a Manager, Technology Controls Testing to provide operational leadership.In this role, you will help oversee assessment delivery, quality, performance, governance, and continuous improvement across Deloitte's global network.

Work you'll do

As a Manager, Technology Controls Testing on the Vendor Cyber Risk Assessment team, you will be responsible for:

• Manage team workload, performance, and service delivery, providing guidance and escalation support as needed; monitor service-level agreements (SLAs), service metrics, assessment quality, and operational risks, taking corrective action and escalating significant concerns.
• Coordinate with member firms, vendors, assessors, remediation teams, and internal stakeholders to resolve issues and maintain assessment progress; produce service performance metrics, risk and escalation reporting, and operational updates for governance discussions and leadership review.
• Review VCRA reports and assessment outputs to ensure quality, consistency, and alignment with established standards; support audit requests, compliance activities, and operational governance requirements.
• Identify and implement continuous improvement opportunities across VCRA processes, questionnaires, findings, templates, workflows, and reporting; provide subject-matter guidance and escalation support for complex vendor cyber risk assessments, findings, and control interpretations.
• Analyze recurring findings, stakeholder feedback, emerging risks, and assessment trends to recommend updates to VCRA questionnaires, guidance, templates, and the findings library; maintain awareness of cybersecurity, third-party, cloud, and artificial intelligence risks and share insights and guidance with the VCRA team.
  
  

The team

The team develops strategies, programs, and services that help unite Deloitte's network across disciplines and borders. It helps enhance data protection, standardize and secure critical infrastructure, and increase cyber visibility. The team collaborates with member firms, vendors, and internal stakeholders to deliver a consistent approach to third-party cybersecurity risk assessments.

Location: Hyderabad

Shift Timings: 11 AM to 8 PM

Qualifications

Required:

• Bachelor’s degree in information technology, cybersecurity, risk management, service management, or business, and 10+ years of experience in IT service management, cybersecurity, vendor risk, technology risk, operational risk, or IT audit.
• Experience managing information technology, cybersecurity, vendor risk, technology risk, operational risk, or audit services across global teams, member firms, vendors, and senior leadership, including workload, performance, service-level agreements, quality, operational priorities, escalations, service metrics, governance reporting, risk updates, and leadership communications.
• Experience conducting vendor cybersecurity risk assessments; evaluating security-control evidence; documenting risk findings; managing remediation; and providing escalation support.
• Experience applying International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27001, American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC) 2, National Institute of Standards and Technology (NIST) Special Publication 800-53, and the NIST Artificial Intelligence Risk Management Framework to assessments or control evaluations.
• Experience with ServiceNow or an enterprise service management or governance, risk, and compliance platform.
• Experience monitoring cybersecurity, third-party, cloud, artificial intelligence, and technology risks and updating assessment guidance, questionnaires, templates, findings libraries, processes, or training.
• You can expect to co-locate on average 3 times a week with variations based on types of work/projects and client locations.
  
  

Preferred:

• Experience supporting or managing a global vendor or third-party cybersecurity risk service.
• Experience leading operational governance, service reviews, audits, dashboards, or continuous improvement initiatives.
• Experience maintaining risk-assessment questionnaires, findings libraries, control guidance, or assessment methodologies.
• Experience assessing cloud services, artificial intelligence, data protection, or operational resilience risks.
• Information Technology Infrastructure Library (ITIL), ISO/IEC 27001 Lead Auditor, Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) certification.
  
  

Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 372777

---