ISO Security Cloud& AI- Senior Analyst- Hyderabad

The Senior ISO Governance, Risk, and Compliance Analyst is responsible for supporting and strengthening the organization’s Information Security Management System (ISMS), with primary alignment to ISO/IEC 27001:2022 and related ISO standards for cloud security, cloud privacy, and artificial intelligence governance.

This senior analyst role leads day-to-day ISO compliance activities, including ISMS documentation, risk assessment coordination, control testing, evidence management, audit readiness, corrective action tracking, and continuous improvement of ISO-aligned security processes.

The role works closely with IT, Security Operations, Privacy, Legal, Risk, and Business teams to ensure information security roles, responsibilities, controls, and evidence are clearly defined, maintained, and audit-ready.

Work you’ll do

As an ISO Security Cloud& AI on the Cyber Security team, you will be responsible for:

• Maintain and improve ISO/IEC 27001:2022-aligned ISMS policies, standards, procedures, control documentation, and governance records
• Coordinate information security risk assessments, maintain risk registers, and track treatment plans, risk owners, due dates, and acceptance records
• Support ISO certification, surveillance, internal audit, and external audit activities through evidence collection, control walkthroughs, self-assessments, and remediation tracking
• Support cloud security, cloud privacy, and artificial intelligence governance activities aligned to ISO/IEC 27017, ISO/IEC 27018, and ISO/IEC 42001
• Develop dashboards, management review materials, and process improvements to strengthen audit readiness, control monitoring, and continual ISMS improvement

The team

The Cyber Security team helps protect the organization’s information assets through governance, risk, and compliance practices that support secure business operations. The team works closely with technology, privacy, legal, risk, and business stakeholders to maintain security standards, manage risk, and improve audit readiness. It also helps translate security and compliance requirements into practical controls across enterprise, cloud, and AI-enabled environments.

Location: Hyderabad

Shift Timings: 2 PM to 11 PM IST

Qualifications

Required:

• 4-6 years of experience in information security governance, risk, and compliance, information security management systems, or information technology audit
• Experience supporting an information security management system aligned to ISO/IEC 27001
• Experience coordinating risk assessments, maintaining risk registers, and tracking corrective actions or treatment plans
• Experience supporting certification audits, surveillance audits, internal audits, or external audits
• Experience maintaining control documentation, evidence repositories, or document control records
• Experience with ServiceNow Governance, Risk, and Compliance, Archer, OneTrust, or equivalent governance, risk, and compliance tools

Preferred:

• Experience supporting cloud security governance aligned to ISO/IEC 27017
• Experience supporting cloud privacy reviews aligned to ISO/IEC 27018
• Experience supporting artificial intelligence governance activities aligned to ISO/IEC 42001
• Experience developing dashboards, key risk indicators, or management review reporting
• ISO/IEC 27001 Lead Implementer, Lead Auditor, or Internal Auditor certification

Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and network…