Job Description: Assistant Manager – VA / VAPT (Vulnerability Assessment & Penetration Testing)

**Location:** Mumbai
**Department:** Information Security
**Reports To:** Manager– Application Security

Role Overview

The Assistant Manager – VA/VAPT will be responsible for overseeing the vulnerability assessment and penetration testing program across the organization. The role includes managing external vendors performing security testing, ensuring regulatory and internal policy compliance, handling day-to-day BAU activities, and preparing reports and dashboards for senior management and regulatory bodies.

The ideal candidate will have hands-on experience in vulnerability management tools, application security scanners, and a solid understanding of the regulatory landscape in BFSI.

Key Responsibilities

1. Vulnerability Management & Testing Oversight
- Coordinate and manage end-to-end VA/VAPT activities conducted by external vendors.
- Review and validate test scopes, methodologies, and deliverables.




- Track remediation progress and coordinate with application/infrastructure teams for closure of findings.
- Ensure testing frequency aligns with regulatory, internal, and client requirements.
- Validate false positives and maintain quality of vulnerability reports.

2. Compliance & Regulatory Alignment
- Ensure compliance with RBI, CERT-In, PCI-DSS, and other regulatory security testing mandates.
- Maintain audit-ready evidence and documentation for all VA/VAPT-related activities.
- Support internal and external audits (including from parent company, clients, and regulators).
- Track and report on compliance posture related to vulnerability management.

3. Reporting & Metrics
- Develop and maintain vulnerability management dashboards and reports for CISO and management.
- Generate periodic risk summaries, trend analysis, and KPI/KRI reports.
- Maintain trackers for testing schedule, remediation status, and exceptions.

4. Process & Governance
- Define and

📌 Assistant Manager (Mumbai)
🏢 Crisil
📍 Mumbai