L40: Assistant Manager – Business Information Security Officer (AUDIT BISO): Hyderabad

Job Title: Assistant Manager – Business Information Security Officer (AUDIT BISO)

Are you ready to sit at the intersection of business strategy and cybersecurity? We are looking for an analytical, highly organized professional to translate complex risk frameworks into business-enabling actions, protecting our organization while driving operational velocity.

Work you’ll do

We are seeking a highly organized, proactive, and meticulous BISO Analyst (Assistant Manager) to serve as a critical bridge between central security governance and our business operations. This position is a critical individual contributor with no direct reports and reports directly to the A&A BISO Manager. The core mission of this role is to own and optimize operational efficiency by shifting recurring coordination, documentation, and status-reporting activities away from senior staff, directly enabling leadership to focus on strategic risk management and complex escalations.

Success in this role requires a candidate who thrives in a highly collaborative yet autonomous environment, working independently to drive day-to-day security initiatives while partnering cross-functionally across product, engineering, legal, compliance, and executive teams. You will heavily manage the business unit's operational baseline, with core responsibilities including coordinating intake processes, rigorous action tracking, and managing ticketing queues and due dates.

You will be responsible for reviewing corporate policies and audit evidence, while actively supporting risk and vulnerability assessments, tracking remediation efforts, and coordinating security notifications with necessary follow-ups. To excel, you must bring a proven track record in security governance, Governance, Risk, and Compliance (GRC), audit readiness, control mapping, and vulnerability remediation, backed by flawless documentation skills, elite time management, and exceptional stakeholder-influencing capabilities.

Key Responsibilities

Operational Queue, Intake & Time Management

• Intake & Action Coordination: Manage the entry point for all business-specific security requests, coordinating intake processes, logging requirements, and driving action-item tracking to completion.
• Queue & Due Date Management: Autonomously oversee operational ticketing queues, prioritizing tasks, setting clear timelines, and managing due dates to ensure no security requests or milestones fall behind.
• Independent Execution: Own day-to-day administrative and coordination workflows with minimal supervision, shifting recurring operational and status-reporting burdens away from senior staff.

Documentation, Assessment & Audit Readiness

• A&A Artifact Maintenance: Maintain and update critical Assessment & Authorization (A&A) documentation, including System Security Plans (SSPs), security control implementation statements, and division policies.
• Audit Evidence Collection: Systematically gather, organize, and archive compliance evidence to maintain continuous audit readiness for internal and external evaluations.
• Assessment Support: Assist in conducting comprehensive risk and vulnerability assessments across business applications, cloud environments, and third-party integrations.

Remediation, Notifications & Reporting

• Vulnerability & Risk Tracking: Monitor risk registers and vulnerability scan outputs, tracking remediation activities cross-functionally with technical teams to ensure timely resolution.
• Security Notifications & Follow-Ups: Coordinate the distribution of security alerts, policy changes, and vulnerability notifications to relevant business stakeholders, executing rigorous follow-up activities to ensure compliance.
• Status Reporting: Compile regular operational metrics, KPIs, and progress reports for the A&A BISO Manager to provide clear visibility into the business unit's overall security posture.

Cross-Functional Stakeholder Management

• Cross-Functional Liaison: Act as a collaborative partner bridging the gap between the central CISO office and department stakeholders (e.g., Engineering, Product, Legal, and Operations).
• Control Mapping Collaboration: Partner with engineering and IT teams to map technical security controls directly to business applications and operational processes.
• Security Awareness Promotion: Champion a security-first culture by providing clear, business-friendly guidance on security policies and compliance requirements across different disciplines.

Qualifications & Requirements:

The Team

Deloitte Technology team helps power Deloitte’s success. The Deloitte Technology team is the engine that drives Deloitte, which serves many of the world’s largest organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.

The ~3,000 professionals in Deloitte Technology deliver services internally including:

• Cyber security

• Technology support

• Technology & Infrastructure

• Application development and management

• Relationship management group

• Strategy

• Deployment

• PMO

• Financials

Cyber Security

Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, evolving business strategies, and shifting risks and vulnerabilities. By leveraging situational awareness, threat intelligence, and a security culture across the organization, the team helps protect the Deloitte brand.

How you’ll grow

At Deloitte, our professional development plan focuses on helping people at every level of their career to help them to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits.

Deloitte’s culture

Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture where our people excel and lead healthy, happy lives.

Corporate citizenship

Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Recruiter tips

We want job seekers exploring opportunities at Deloitte to feel prepared and confident. To help you with your interview, we suggest that you do your research: know some background about the organization and the business area you’re applying to.