Role Overview

We are looking for a Cyber Security Consultant with 3–8 years of experience across Cyber Security, VAPT, Security Assessments, Cyber GRC and Security Frameworks.

The candidate should have a combination of hands-on technical security experience and cybersecurity governance/compliance exposure, with the ability to work with clients and translate technical findings into practical security recommendations.

Key Responsibilities

- Conduct Vulnerability Assessment, Penetration Testing (VAPT), Security Testing and Red Teaming activities.
- Perform Cyber Security Assessments, Risk Assessments and Gap Assessments against ISO 27001, NIST CSF, CIS Controls and other security frameworks.
- Support clients on Cyber Security Governance, Risk & Compliance (GRC) and regulatory requirements.
- Develop and implement Cyber Security policies, procedures, standards and controls.
- Assess security controls and recommend improvements across network, application, infrastructure and cloud environments.
- Work with technologies such as Firewalls, SIEM, IDS/IPS, EDR/XDR and security monitoring tools.
- Support Incident Response, threat analysis, post-incident reviews and remediation planning.
- Provide guidance on PCI DSS, GDPR, DPDP, HIPAA and other applicable cybersecurity/privacy requirements.
- Conduct security audits and prepare assessment reports, risk findings, remediation plans and management presentations.




- Understand client requirements and recommend appropriate cybersecurity solutions and controls.
- Stay updated on cyber threats, vulnerabilities, attack techniques, security technologies and regulatory changes.

Required Skills & Experience
- 3–8 years of experience in Cyber Security / Information Security / Cyber GRC.
- Hands-on experience in VAPT, Vulnerability Assessment, Penetration Testing or Red Teaming.
- Experience with ISO 27001, NIST CSF, CIS Controls or similar cybersecurity frameworks.
- Experience in Cyber Security Risk Assessment, Gap Assessment, Security Audits and Compliance.
- Knowledge of PCI DSS, GDPR, DPDP, HIPAA or other regulatory/compliance standards.
- Valuable understanding of SIEM, Firewalls, IDS/IPS, EDR/XDR and network security.
- Exposure to Cloud Security across AWS, Azure or similar cloud platforms.
- Understanding of Risk Management, Threat Intelligence and Incident Response.
- Strong analytical, documentation and report-writing skills.
- Strong communication skills with the ability to interact with technical and non-technical stakeholders.
- Bachelor’s degree in Computer Science, Information Security, IT or a related discipline.

Preferred Certifications Certifications such as CISSP, CISM, CEH, OSCP, ISO 27001 Lead Auditor or ISO 27001 Lead Implementer will be an advantage

📌 Cyber Security Consultant (Mumbai)
🏢 Casamentero Consulting
📍 Mumbai