Associate Director - VAPT

Key
Responsibilities:  

As a part of our Cyber
Defence and Resilience team you’ll build and nurture positive working
relationships with teams and clients with the intention to exceed client
expectations. 

Deloitte is seeking a dynamic
and experienced professional to lead its Cyber Security Practice, with core
expertise in vulnerability management, DevSecOps, penetration testing,
application and network security. This leader will play a key role in shaping
and scaling attack management services, delivering high-impact solutions to
clients, and guiding the next generation of cyber professionals.

Key Skills & Expertise 

• Experience : 15-20 Years
  
• Location: Delhi
  
• Lead
  delivery of Cyber Defence projects across vulnerability management,
  DevSecOps integration, penetration testing, and secure SDLC.
  
• Lead
  and guide advanced penetration testing – covering internal/external
  networks, web/mobile applications and cloud environments – with actionable
  reporting.
  
• Design
  and implement enterprise-wide vulnerability management programs, establish
  metrics, and advise clients on remediation strategy.
  
• Oversee
  advanced security assessments, including application security (SAST/DAST),
  network penetration testing, and infrastructure assessments.
  
• Embed
  security into CI/CD pipelines, driving automation across development and
  deployment.
  
• Support
  testing strategy and execution across on-premise, cloud and converged
  infrastructure.
  
• Serve
  as a strategic advisor to clients, presenting findings, driving executive
  communications, and aligning solutions to business goals.
  
• Mentor
  diverse cybersecurity teams and contribute to the growth of Deloitte’s
  security offerings.
  

Requirements

Required Skill Set: 

• Education:
  Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or
  related field.
  
• Experience:
  15+ years of relevant experience, with 5+ years in leadership roles across
  cyber domains.
  
• Certifications:
  CISSP, OSCP, CISM, CEH, GPEN, or equivalent expert-level certification(s).
  
• Deep
  hands-on expertise in threat & vulnerability management, security
  testing tools/methodologies, and secure application development practices.
  
• Strong
  communication, client management, and team leadership skills.
  

Preferred Skills:

• Knowledge
  of cloud security frameworks and risk regulations (NIST, ISO 27001, PCI
  DSS, etc).
  
• Experience
  managing large-scale consulting engagements or security programs