IT Security Specialist – Audits & VAPT

About the role

We are looking for an experienced IT Security Specialist to lead and support internal, external and regulatory security audits, as well as perform vulnerability assessment and penetration testing (VAPT) across web, mobile, API and network environments. The role will act as the primary liaison with auditors and ensure audit readiness across the organization.

Key responsibilities

• Support ISO 27001, SOC and other regulatory audits; collect, validate and present audit evidence.
• Track audit observations, manage corrective action plans and ensure timely remediation.
• Monitor user access, authentication activities, MFA, conditional access and endpoint compliance.
• Assist in security incident investigations and provide audit‑ready documentation.
• Conduct periodic access reviews, risk assessments and update security policies, standards and procedures.
• Perform VAPT for web, mobile, API and network infrastructure; produce testing reports and executive summaries.
• Identify, validate, prioritize and track security vulnerabilities to closure.
• Support secure application assessments throughout the SDLC.

Required profile

• 3–7 years of experience in an IT security role focused on audits and VAPT.
• B.Tech or equivalent graduate degree with relevant certifications (CISA, ISO 27001 LA/LI, CEH, CISSP, Security+).
• Strong written and verbal communication skills; ability to explain technical issues to non‑technical audiences.
• Team player comfortable working in cross‑functional environments.

Required skills

• Vulnerability assessment and penetration testing tools.
• Endpoint security, Mobile Device Management (MDM), Email security.
• Security Incident and Event Management (SIEM), Web Application Firewall (WAF), IDS/IPS.
• Vulnerability management, Data Loss Prevention (DLP), antivirus, patch management.
• Active Directory, Windows Server administration.
• Cloud platforms: Azure, AWS, GCP.
• Experience with audit frameworks: ISO 27001, SOC, NIST, CIS.