Deloitte Hiring: Senior Analyst, Third-Party Risk Management 2026:-
Deloitte Touche Tohmatsu India LLP is seeking candidates for the Senior Analyst – Third-Party Risk Management position within its Technology & Transformation (T&T), Cybersecurity (CST) team in Coimbatore. This opportunity is suited to professionals with experience in cybersecurity, IT audits, information risk management, cloud security, and third-party risk assessments.
| Company: | Deloitte Touche Tohmatsu India LLP |
| Job Title: | T&T | Cyber: CST | Senior Analyst | Third-Party Risk Management |
| Role: | Senior Analyst |
| Experience Required: | 1+ years in IT Audits or Cloud Security; 1–7 years of Cyber Third-Party Risk Management (TPRM) |
| Salary: | As per Company Standards |
| Application Deadline: | ASAP |
Role Overview:-
The Senior Analyst – Third-Party Risk Management will support clients in assessing, documenting, and managing information security risks associated with third-party vendors, suppliers, and service providers.
The role involves conducting risk assessments and audits, evaluating security controls, identifying compliance gaps, documenting findings, and recommending improvements to policies, processes, and procedures. The selected candidate will collaborate with client stakeholders, including compliance, audit, and regulatory teams, to support effective cybersecurity risk management.
Educational Requirements:-
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- Relevant professional experience in IT audits, cloud security, cybersecurity, or information risk management.
- Mandatory experience in Cyber Third-Party Risk Management (TPRM), with the job description specifying a range of 1–7 years.
Key Skills:-
1. Technical Skills
- Cybersecurity risk assessment
- Third-Party Risk Management (TPRM)
- Information Security Management Systems (ISMS)
- IT audits and security audits
- Cloud security
- Infrastructure and application security
- Data protection and privacy risk assessment
- Security control evaluation and gap analysis
- Risk documentation and audit reporting
- ISO 22301 implementation and audits
- Information risk management
2. Functional and Domain Skills
- Vendor, supplier, and third-party risk management
- Cybersecurity compliance and governance
- Identification of information security risks and control gaps
- Policy, process, procedure, and standards improvement
- Risk mitigation and compensating control recommendations
- Audit preparation and documentation
- Stakeholder management and client communication
- Coordination with compliance, audit, and regulatory teams
- Understanding of third-party data protection and privacy obligations
3. Soft Skills
- Excellent written and verbal communication
- Strong documentation and presentation skills
- Analytical and problem-solving abilities
- Stakeholder coordination and expectation management
- Attention to detail
- Adaptability in local and global work environments
- Ability to work in cross-functional and cross-cultural teams
- Self-motivation and a proactive approach
Roles and Responsibilities:-
1. Third-Party Risk Assessment
- Conduct third-party, vendor, and supplier information security risk assessments.
- Evaluate the security controls and risk management practices of third parties.
- Assess data protection and privacy risks associated with external service providers.
- Identify potential risks relating to people, processes, and technology.
2. ISMS, IT Audit, and Compliance
- Support Information Security Management System (ISMS) assessments.
- Conduct IT security audits and evaluate the effectiveness of security controls.
- Assist with ISO 22301 implementation activities and audits.
- Review applicable control frameworks and identify compliance gaps.
- Document requirements and obligations in coordination with client compliance, audit, and regulatory teams.
3. Risk Identification and Mitigation
- Identify gaps, observations, risks, opportunities, and areas for improvement.
- Recommend improvements to information security policies, processes, procedures, and standards.
- Document security risks, recommendations, and compensating controls.
- Support the development of practical risk mitigation recommendations.
4. Reporting and Documentation
- Prepare detailed risk assessment and audit reports.
- Maintain accurate records of identified risks, observations, and control deficiencies.
- Present findings and recommendations to relevant stakeholders.
- Communicate assessment outcomes clearly and professionally.
5. Client and Stakeholder Management
- Liaise effectively with clients and manage stakeholder expectations.
- Collaborate with internal and external teams to gather relevant information.
- Coordinate with cross-functional stakeholders to support risk assessment activities.
- Work effectively in local and global business environments.
About the Company:-
Deloitte is a professional services organization that supports businesses in addressing complex challenges across consulting, risk advisory, technology, and other business functions.
Its cybersecurity services help organizations prevent cyberattacks, protect valuable assets, manage technology risks, and strengthen their security and resilience. Deloitte’s cyber risk approach focuses on identifying threats, improving controls, and integrating risk management into business strategies.
Deloitte: Senior Analyst, Third-Party Risk Management 2026 Application Process:-
Apply Link:- Click Here To Apply
Note:- Only the shortlisted candidates will be notified for the further interview process.
