Information Technology Security Consultant - GRC/VAPT

We are looking for a skilled and motivated Cybersecurity Analyst with experience in Governance, Risk, and Compliance (GRC) and Vulnerability Assessment & Penetration Testing (VAPT). This hybrid role offers the flexibility of working from home while being based in Mumbai or Pune, with occasional in-person meetings or client visits as needed. You’ll play a key role in delivering value to our clients by combining technical assessments with compliance expertise.

• Conduct VAPT activities across web applications, infrastructure, cloud, and networks.
• Perform compliance and gap assessments against standards such as ISO 27001, SOC 2, NIST, and others.
• Support the development and maintenance of security policies, risk registers, and audit documentation.
• Coordinate with client and internal teams to ensure alignment with compliance and risk management goals.
• Identify and report vulnerabilities and control gaps, and provide actionable remediation guidance.
• Participate in internal and external audits; prepare and present reports.
• Engage directly with clients during assessments, remediation discussions, and periodic reviews.

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 3 to 7 years of experience in cybersecurity, particularly in GRC and VAPT roles.
• Hands-on experience with VAPT tools like Nessus, Burp Suite, Nmap, Metasploit, etc.
• Familiarity with cybersecurity frameworks (ISO 27001, NIST CSF, CIS Controls, etc.).
• Strong documentation and communication skills, especially in customer-facing settings.
• Experience in a consulting or services environment is a plus.
• Relevant certifications (e.g., CEH, OSCP, ISO 27001 LA/LI, CISA, CRISC) are desirable.

• Flexibility to work remotely with occasional on-site client engagements.
• Opportunity to work on a diverse range of projects across security domains.
• Be part of a growing cybersecurity team focused on impact and innovation.
• Supportive culture with a strong focus on continuous learning and professional development.