Analyst/Senior Analyst – IT Vulnerability Management

USI T&I/IT Security – Analyst/Senior Analyst – IT Vulnerability Management - Deloitte Support Services India Private Limited

Work you’ll do

Responsibilities

As a team member, you will be accountable for, but not limited to the responsibilities below.

Vulnerability Assessment and Remediation:

• Conduct regular vulnerability scans on company networks, applications, and systems to identify security weaknesses.
• Analyze scan results, prioritize vulnerabilities based on risk, and provide actionable remediation recommendations.
• Collaborate with IT and development teams to ensure vulnerabilities are addressed and mitigated promptly.
• Collaborate with the Global teams to work on process improvement mechanisms
• Track and manage the remediation of identified vulnerabilities, ensuring timely resolution.
• Develop and maintain a vulnerability management program, including policies, procedures, and documentation.
• Coordinate with internal stakeholders, external vendors and security partners to validate and verify remediation efforts.

Security Monitoring and Reporting:

• Monitor and analyze security alerts and logs to detect and respond to potential security incidents.
• Prepare and deliver regular reports on vulnerability status, trends, and remediation progress to senior management.
• Conduct risk assessments and security audits to ensure compliance with industry standards and regulations.

Collaboration and Training:

• Work closely with cross-functional teams to integrate vulnerability management practices into the software development lifecycle.
• Provide training and guidance to IT staff on vulnerability management best practices and tools.
• Stay current with emerging threats, vulnerabilities, and security trends to continuously improve the firm's security posture.

• Vulnerability Assessment Tools Proficiency: Expertise in using vulnerability scanning tools such as Qualys, Nessus or Rapid7.
• Risk Analysis and Prioritization: Strong analytical skills to assess and prioritize vulnerabilities based on risk and impact.
• Remediation Coordination: Ability to collaborate effectively with IT, development teams, and external vendors to ensure timely remediation of vulnerabilities.
• Security Monitoring and Incident Response: Experience in monitoring security alerts and logs and responding to potential security incidents.
• Reporting and Documentation: Proficiency in preparing detailed reports on vulnerability status, trends, and remediation progress for senior management.
• Knowledge of Security Standards and Compliance: Understanding of industry standards and regulations (e.g., ISO 27001, NIST, PCI-DSS) and conducting risk assessments and security audits.

Education: Bachelor’s Degree or equivalent

Experience: 3-4 years of experience in conducting or facilitating information security audits.

Work Location: Hyderabad

Shift Timings: 11 AM to 8 PM IST OR 2 PM to 11 PM IST.

The Team

At Deloitte, we’re all about collaboration. And nowhere is this more apparent than among our 2,000-strong internal services team. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas; Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience.

How you’ll grow

At Deloitte, we’ve invested a great deal to create a rich environment in which our professionals can grow. We want all our people to develop in their own way, playing to their own strengths as they hone their leadership skills. And, as a part of our efforts, we provide our professionals with a variety of learning and networking opportunities—including exposure to leaders, sponsors, coaches, and challenging assignments—to help accelerate their careers along the way. No two people learn in exactly the same way. So, we provide a range of resources including live classrooms, team- based learning, and eLearning. DU: The Leadership Center in India, our state-of-the-art, world-class learning Center in the Hyderabad offices is an extension of the Deloitte University (DU) in Westlake, Texas, and represents a tangible symbol of our commitment to our people’s growth and development. Explore DU: The Leadership Center in India

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.

Deloitte’s culture

Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture that is inclusive, invites authenticity, leverages our diversity, and where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte.

Corporate citizenship

Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Deloitte’s impact on the world.