Senior IT GRC Consultant (VAPT)

Key Responsibilities :

• Deliver consulting services related to Vulnerability Assessment & Penetration Testing (VAPT), Information Security, and Cybersecurity Governance. 
• Perform or support vulnerability assessments and penetration testing activities for web applications, mobile applications, APIs, networks, and IT infrastructure. 
• Analyse security vulnerabilities, assess risks, and provide practical remediation recommendations based on industry best practices. 
• Prepare clear and comprehensive technical reports and executive summaries of assessment findings. 
• Collaborate with clients to explain security findings, mitigation strategies, and remediation plans. 
• Assist clients in strengthening their security posture through security assessments, gap analyses, and compliance reviews. 
• Support security awareness sessions, technical workshops, or client consultations related to cybersecurity and information security. 
• Work closely with Project Managers and clients to ensure project deliverables are completed on time and meet quality standards. 
• Stay up to date with emerging cybersecurity threats, attack techniques, vulnerabilities, and security technologies. 
• Contribute to the continuous improvement of VAPT methodologies, templates, and internal knowledge sharing.

Requirements :

• Bachelor's degree from a reputable university with a minimum GPA of 3.00, preferably in Information Technology, Computer Science, Cyber Security, or other related disciplines. 
• Minimum 3–5 years of experience in Information Security, Vulnerability Assessment & Penetration Testing (VAPT), IT Security, or IT GRC. 
• Good understanding of Information Security principles, IT Governance, Risk Management, and Cybersecurity best practices. 
• Familiarity with security frameworks and standards such as ISO/IEC 27001, NIST Cybersecurity Framework, OWASP Top 10, COBIT, and MITRE ATT&CK is preferred. 
• Hands-on experience in conducting or supporting VAPT activities for web applications, mobile applications, APIs, networks, or infrastructure.
• Familiarity with security assessment tools such as Nessus, Burp Suite, Nmap, Metasploit, Acunetix, OWASP ZAP, or similar tools is an advantage. 
• Understanding of secure coding concepts, common security vulnerabilities, and remediation recommendations is preferred. 
• Strong analytical, troubleshooting, and problem-solving skills. 
• Excellent communication and presentation skills with the ability to explain technical findings to both technical and non-technical stakeholders. 
• Detail-oriented, eager to learn, and able to work independently as well as collaboratively in a fast-paced consulting environment.