Roles & responsibilities

- Coordinate and govern end-to-end VAPT lifecycle across applications, infrastructure, and cloud

environments (internal and external).
- Review and track VAPT findings; ensure timely remediation and risk treatment as per severity.
- Assist in audit readiness by maintaining vulnerability closure evidence, remediation logs, and tracker

hygiene.
- Maintain the centralized VAPT tracker, risk register, Prepare monthly/quarterly MIS reports and

dashboards for reporting to IT, risk, and leadership teams.
- Assist in defining and updating VAPT governance processes, including scoping templates, test plans, and

closure evidence checklists.
- The role involves coordination between development, security, and compliance teams to institutionalize

secure SDLC, manage AppSec KPIs, and ensure third-party application risk oversight.




- Act as a liaison between security assessors and asset/application owners to ensure timely validation and

remediation of findings.
- Maintain a centralized vulnerability register with remediation owners, timelines, risk ratings, and

current status.
- Monitor SLA adherence for remediation based on criticality
- Support the governance of exception approvals or risk acceptances in alignment with the risk team or

CISO office regulatory expectations (e.g., RBI, SEBI, CERT-In).

Educational qualifications

Bachelors degree in Computer Science, IT, or related field.

Work experience

- 2–4 years of experience in cybersecurity with direct exposure to VAPT coordination or security

testing governance and managing the governance of the client’s Application Security (AppSec) Program.

📌 Vapt Engineer (Gurugram)
🏢 Forvis Mazars
📍 Gurugram