Delivery Manager – Application & Cloud Security Services

Role Summary

The Delivery Manager will be responsible for end-to-end delivery of cybersecurity services for enterprise customers, acting as the primary customer interface. This role ensures timely, high-quality, and compliance-aligned delivery across Application Security, VAPT, Secure Architecture Reviews, DevSecOps (preferred), Cloud Security (preferred), and Configuration Audits, in line with CERT-In and regulatory requirements.

Key Responsibilities

Customer Engagement & Governance

• Act as the single point of contact (SPOC) for customers throughout the engagement lifecycle
• Lead kick-off meetings, periodic status reviews, and closure discussions
• Manage customer expectations, risks, and escalations proactively

End-to-End Delivery Ownership

• Own delivery across Application Security, VAPT, Architecture Reviews, DevSecOps, Cloud Security, and Configuration Audits
• Ensure scope adherence, timelines, effort estimation, and delivery quality
• Manage multiple parallel customer engagements effectively

Application Security & VAPT Delivery

• Oversee Web, Mobile, and API security testing engagements (SAST, DAST, IAST)
• Manage Network, Infrastructure, and Cloud VAPT activities
• Ensure findings are validated, risk-based, and business-aligned

Secure Architecture & Threat Modeling

• Lead secure architecture and design reviews for applications, APIs, and platforms
• Ensure threat modeling using STRIDE / OWASP Threat Modeling methodologies
• Translate architectural risks into actionable remediation recommendations

Configuration & Compliance Audits

• Lead configuration audits for Operating Systems, Databases, Network Devices, and Cloud Services
• Ensure alignment with CERT-In guidelines, RBI, SEBI, IRDAI, ISO 27001, OWASP, and CIS benchmarks
• Support customers during regulatory, internal, and third-party audits

Quality Assurance & Reporting

• Review and approve VAPT, architecture review, and cloud security reports
• Ensure reports are clear, audit-ready, and executive-friendly
• Maintain consistency in risk rating, impact articulation, and remediation guidance

Team & Resource Management

• Plan and allocate AppSec engineers, VAPT consultants, and DevSecOps specialists
• Monitor utilization, delivery performance, and skill alignment
• Mentor teams on customer communication and documentation standards

Pre-Sales & Account Support

• Support RFPs, proposals, and customer solution discussions
• Provide inputs for effort estimation, delivery timelines, and engagement models
• Identify opportunities for account growth and repeat business

Required Skills & Competencies

Technical & Domain Knowledge

• Strong understanding of Application Security, VAPT, and Secure SDLC
• Working knowledge of DevSecOps and Cloud Security concepts
• Familiarity with OWASP, NIST, CIS, ISO 27001, and CERT-In guidelines
• Experience delivering services to regulated industries (Banking, FinTech, BFSI)

Delivery & Leadership Skills

• Excellent customer communication and stakeholder management
• Strong delivery governance and escalation handling skills
• Ability to balance quality, timelines, and customer expectations

Preferred Certifications

• CEH / eWPTX / GWAPT
• Cloud Security certifications (AWS / Azure / GCP)
• ISO 27001 Lead Auditor / Implementer

Immediate Joiners Preferred