Cyber Security Consultant

Role Overview

We are looking for a Cyber Security Consultant with 3–8 years of experience across Cyber Security, VAPT, Security Assessments, Cyber GRC and Security Frameworks.

The candidate should have a combination of hands-on technical security experience and cybersecurity governance/compliance exposure, with the ability to work with clients and translate technical findings into practical security recommendations.

Key Responsibilities

• Conduct Vulnerability Assessment, Penetration Testing (VAPT), Security Testing and Red Teaming activities.
• Perform Cyber Security Assessments, Risk Assessments and Gap Assessments against ISO 27001, NIST CSF, CIS Controls and other security frameworks.
• Support clients on Cyber Security Governance, Risk & Compliance (GRC) and regulatory requirements.
• Develop and implement Cyber Security policies, procedures, standards and controls.
• Assess security controls and recommend improvements across network, application, infrastructure and cloud environments.
• Work with technologies such as Firewalls, SIEM, IDS/IPS, EDR/XDR and security monitoring tools.
• Support Incident Response, threat analysis, post-incident reviews and remediation planning.
• Provide guidance on PCI DSS, GDPR, DPDP, HIPAA and other applicable cybersecurity/privacy requirements.
• Conduct security audits and prepare assessment reports, risk findings, remediation plans and management presentations.
• Understand client requirements and recommend appropriate cybersecurity solutions and controls.
• Stay updated on cyber threats, vulnerabilities, attack techniques, security technologies and regulatory changes.

Required Skills & Experience

• 3–8 years of experience in Cyber Security / Information Security / Cyber GRC.
• Hands-on experience in VAPT, Vulnerability Assessment, Penetration Testing or Red Teaming.
• Experience with ISO 27001, NIST CSF, CIS Controls or similar cybersecurity frameworks.
• Experience in Cyber Security Risk Assessment, Gap Assessment, Security Audits and Compliance.
• Knowledge of PCI DSS, GDPR, DPDP, HIPAA or other regulatory/compliance standards.
• Good understanding of SIEM, Firewalls, IDS/IPS, EDR/XDR and network security.
• Exposure to Cloud Security across AWS, Azure or similar cloud platforms.
• Understanding of Risk Management, Threat Intelligence and Incident Response.
• Strong analytical, documentation and report-writing skills.
• Strong communication skills with the ability to interact with technical and non-technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, IT or a related discipline.

Preferred Certifications

Certifications such as CISSP, CISM, CEH, OSCP, ISO 27001 Lead Auditor or ISO 27001 Lead Implementer will be an advantage