Delivery Manager – Application & Cloud Security Services

ESP Engineered; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

ESP Engineered seeks an experienced Delivery Manager to oversee the end-to-end delivery of cybersecurity services, ensuring compliance with CERT-In and regulatory standards. The ideal candidate has 8–12 years of service delivery experience in cybersecurity, with a strong focus on Application Security, VAPT, and Cloud Security services.

In this role, you'll act as the primary interface with customers and manage a variety of engagements simultaneously. Preferred certifications include CEH and Cloud Security certifications from AWS, Azure, or GCP.

Qualifications

• 8–12 years of experience, with minimum 5–6 years in cybersecurity service delivery.
• Strong understanding of Application Security, VAPT, and Secure SDLC.
• Experience delivering services to regulated industries such as Banking and FinTech.

Responsibilities

• Act as the single point of contact for customers throughout the engagement lifecycle.
• Own delivery across Application Security, VAPT, Architecture Reviews, and Compliance Audits.
• Lead configuration audits for Operating Systems, Databases, and Cloud Services.

Skills

Customer communication

Stakeholder management

Delivery governance

Application Security

VAPT

Secure SDLC

Education

Relevant degree or certifications in Cybersecurity

Tools

OWASP

NIST

CIS

ISO 27001

Job description

Delivery Manager – Application & Cloud Security Services

8–12 years (minimum 5–6 years in cybersecurity service delivery)

Full-Time

Role Summary

The Delivery Manager will be responsible for end‑to‑end delivery of cybersecurity services for enterprise customers, acting as the primary customer interface. This role ensures timely, high‑quality, and compliance‑aligned delivery across Application Security, VAPT, Secure Architecture Reviews, DevSecOps (preferred), Cloud Security (preferred), and Configuration Audits, in line with CERT‑In and regulatory requirements.

Key Responsibilities

• Customer Interface
  • Act as the single point of contact (SPOC) for customers throughout the engagement lifecycle.
  • Lead kick‑off meetings, periodic status reviews, and closure discussions.
  • Manage customer expectations, risks, and escalations proactively.
• End‑to‑End Delivery Ownership
  • Own delivery across Application Security, VAPT, Architecture Reviews, DevSecOps, Cloud Security, and Configuration Audits.
  • Ensure scope adherence, timelines, effort estimation, and delivery quality.
  • Manage multiple parallel customer engagements effectively.
• Application Security & VAPT Delivery
  • Oversee Web, Mobile, and API security testing (SAST, DAST, IAST).
  • Manage Network, Infrastructure, and Cloud VAPT activities.
  • Ensure findings are validated, risk‑based, and business‑aligned.
  • Lead secure architecture and design reviews, conduct threat modeling using STRIDE / OWASP.
  • Translate architectural risks into actionable remediation recommendations.
• Configuration & Compliance Audits
  • Lead configuration audits for Operating Systems, Databases, Network Devices, and Cloud Services.
  • Ensure alignment with CERT‑In guidelines, RBI, SEBI, IRDAI, ISO 27001, OWASP, and CIS benchmarks.
  • Support customers during regulatory, internal, and third‑party audits.
• Quality Assurance & Reporting
  • Review and approve VAPT, architecture review, and cloud security reports.
  • Ensure reports are clear, audit‑ready, and executive‑friendly.
  • Maintain consistency in risk rating, impact articulation, and remediation guidance.
• Team & Resource Management
  • Plan and allocate AppSec engineers, VAPT consultants, and DevSecOps specialists.
  • Monitor utilization, delivery performance, and skill alignment.
  • Mentor teams on customer communication and documentation standards.
  • Support RFPs, proposals, and customer solution discussions.
  • Provide inputs for effort estimation, delivery timelines, and engagement models.
  • Identify opportunities for account growth and repeat business.
• Technical & Domain Knowledge
  • Strong understanding of Application Security, VAPT, and Secure SDLC.
  • Working knowledge of DevSecOps and Cloud Security concepts.
  • Familiarity with OWASP, NIST, CIS, ISO 27001, and CERT‑In guidelines.
  • Experience delivering services to regulated industries (Banking, FinTech, BFSI).
• Delivery & Leadership Skills
  • Excellent customer communication and stakeholder management.
  • Strong delivery governance and escalation handling.
  • Ability to balance quality, timelines, and customer expectations.

Preferred Certifications

• CEH / eWPTX / GWAPT
• Cloud Security certifications (AWS / Azure / GCP)