Associate Manager - VAPT at Adani Group in Ahmedabad

Purpose/Objective

The VAPT Specialist is responsible for executing and supporting the Vulnerability Assessment and Penetration Testing (VAPT) program within the Adani Corporate team. The role involves performing vulnerability scans, coordinating with external vendors and BU CISOs for remediation, ensuring compliance, and managing associated operational tasks. The Specialist focuses on hands-on execution, monitoring, and reporting of VAPT activities across the organization.

Key Responsibilities of Role

VAPT Specialist VAPT Execution: Conduct regular VAPT scans across approximately 10,000 devices, including systems, networks, and applications. Use industry-standard tools (e. g. , Nessus, Qualys, Burp Suite) to identify vulnerabilities and generate detailed reports. Collaboration with Business Units: Coordinate with BU CISOs to prioritize and remediate identified vulnerabilities. Ensure remediation efforts are completed and validated by performing follow-up scans or tests. Work with external VAPT service providers to ensure effective scanning and timely delivery of reports. Validate the quality and accuracy of vendor-delivered reports and findings. Reporting and Documentation: Maintain detailed documentation of identified vulnerabilities, remediation timelines, and status updates. Prepare vulnerability management dashboards and reports for the VAPT Lead. Cloud Security Protection Management (CSPM): Monitor and assess the security posture of cloud environments (AWS, Azure, etc. ). Identify compliance gaps in cloud security for devices, networks, and infrastructure and work with IT teams to address them. Remediation Tracking and Validation: Track the progress of remediation activities across business units to ensure timely closure of vulnerabilities. Validate remediation efforts by performing re-assessments or scans and confirming that vulnerabilities have been addressed. IT Security Support for Critical Environments: Provide hands-on cybersecurity support for the Chairman/Promoter’s office and residence. Regularly assess IT systems and devices in these critical environments to ensure they are free of vulnerabilities. Key Stakeholders - Internal Executive Leadership VAPT Team (Penetration Testers, Vulnerability Analysts) System Administrators and Operations Internal Auditors Legal and Compliance IT Team Product Management Team Security Awareness and Training Teams Incident Response Team (IRT) Key Stakeholders - External External Security Consultants Regulatory Bodies Penetration Testing Firms Contractors and Service Providers Industry Consultants

Technical Competencies

Application Security Management-CYS,Cybersecurity Program & Strategy Management-CYS,IT Support & Infrastructure Security-CYS,Identity & Access Management-CYS,Network Security & Perimeter Defense-CYS,Operational Technology & Industrial Control System Security-CYS,Research and Innovation-CYS,Security Assessment and Testing-CYS

Qualifications and Experience

Educational Qualification: Minimum Bachelor's degree Preffered : Computer Science, Information Technology, Cybersecurity, or a related field. Advanced degree (e. g. , Master's, MBA) in Cybersecurity, Information Assurance, or a relevant discipline is highly desirable. Certification: CEH (Certified Ethical Hacker), CompTIA Security+, or certifications in vulnerability management tools (e. g. , Qualys, Nessus). Work Experience (Range of years): 3+ years of hands-on experience in VAPT and vulnerability management.