Roles & responsibilities
Coordinate and govern end-to-end VAPT lifecycle across applications, infrastructure, and cloud

settings (internal and external).
Review and track VAPT findings; ensure timely remediation and risk treatment as per severity.
Assist in audit readiness by maintaining vulnerability closure evidence, remediation logs, and tracker

hygiene.
Maintain the centralized VAPT tracker, risk register, Prepare monthly/quarterly MIS reports and

dashboards for reporting to IT, risk, and leadership teams.
Assist in defining and updating VAPT governance processes, including scoping templates, test plans, and

closure evidence checklists.
The role involves coordination between development, security, and compliance teams to institutionalize

secure SDLC, manage AppSec KPIs, and ensure third-party application risk oversight.
Act as a liaison between security assessors and asset/application owners to ensure timely validation and

remediation of findings.
Maintain a centralized vulnerability register with remediation owners, timelines, risk ratings, and

current status.




Monitor SLA adherence for remediation based on criticality
Support the governance of exception approvals or risk acceptances in alignment with the risk team or

CISO office regulatory expectations (e.g., RBI, SEBI, CERT-In).

Educational qualifications

Bachelors degree in Computer Science, IT, or related field.

Work experience
2–4 years of experience in cybersecurity with direct exposure to VAPT coordination or security

testing governance and managing the governance of the client’s Application Security (AppSec)

Program.

Role: Management Consulting - Other, Industry Type: Miscellaneous, Department: Consulting, Employment Type: Full Time, Permanent Role Category: Management Consulting Education UG: Any Graduate Key Skills Skills highlighted with ‘‘ are preferred keyskills Web Application SecurityPenetration TestingVaptVulnerability Assessment Burp SuiteOWASPMobile Application Security

📌 Vapt Engineer Gurugram
🏢 Forvis Mazars
📍 Gurugram