Delivery Manager - Security

About the Company:Headquartered in California, U.S.A., GSPANN provides consulting and IT services to global clients. We help clients transform how they deliver business value by helping them optimize their IT capabilities, practices, and operations with our experience in retail, high-technology, and manufacturing. With five global delivery centers and 2000+ employees, we provide the intimacy of a boutique consultancy with the capabilities of a large IT services firm.Position: Delivery Manager - SecurityExperience: 12 + YearsJob location: Gurugram/HyderabadRole Overview:Own end-to-end delivery of security services across SOC operations, Application Security (SAST/DAST/SCA/ASPM), Offensive Security, Penetration Testing, Vulnerability Management, Threat Modeling, AI Security, Cloud Security, IAM, Data Security & Privacy, Cybersecurity & Information Security compliance. Drive measurable outcomes, governance rigor, and stakeholder trust.Key Responsibilities:Operate and continuously mature a 24×7 Security Operations Center (SOC), including alert triage, incident handling, escalation management, playbook development, post-incident reviews, and root cause analysis. Integrate threat intelligence feeds, conduct purple teaming exercises, optimize detections mapped to the MITRE ATT&CK framework, and drive reduction of MTTD and MTTR. Maintain operational dashboards and conduct weekly and monthly performance reviews. Implement and govern SAST, SCA, and DAST within CI/CD pipelines, enforce policy gates, and manage Application Security Posture Management (ASPM) for holistic application risk. Build threat models using STRIDE and LINDDUN, partner with engineering teams to meet remediation SLAs, and track exploitability and fix KPIs. Manage GitHub and GitLab security controls.Plan and execute penetration tests across web, API, mobile, cloud, and network assets, and manage red and purple team exercises. Oversee risk-based vulnerability management leveraging CVSS, EPSS, and KEV, attack surface management, asset inventory hygiene, patch orchestration, and exception governance.Establish AI/ML security controls including prompt injection defense, data leakage prevention, adversarial testing, model integrity, provenance, and usage policies for internal and external LLMs. Implement logging, monitoring, and guardrails aligned with privacy and compliance requirements.Manage CSPM/CNAPP, CIEM, and workload protection for multi-cloud environments including Azure, AWS, and GCP. Implement Kubernetes and container security, Zero Trust frameworks, Infrastructure as Code scanning (Terraform/CloudFormation), secrets management, and hardening baselines, and develop cloud-native detection strategies.Enforce least privilege, MFA, RBAC/ABAC, PAM, and identity governance processes. Manage joiner, mover, and leaver lifecycles, data classification, encryption at rest and in transit, and data loss prevention programs. Ensure privacy-by-design and compliance with GDPR, DPDP, and other applicable regulations.Align the security program with ISO 27001/2, SOC 2, PCI DSS, HIPAA (if applicable), and maintain risk registers, control testing, audit readiness, remediation tracking, and policy lifecycle management. Support customer RFP and RFI security responses and provide executive reporting.Required Skills & Qualifications:12 to 15+ years in Cybersecurity; 6+ years leading delivery/programs; proven ownership of SOC, AppSec/DevSecOps, VM; hands-on in cloud security (Azure/AWS/GCP), containers (K8s), microservices, modern CI/CD.Certifications: Nice to haveCISSP, CISM, CRISC; OSCP/OSWE/OSCE; CEH; CCSP; AZ-500/AWS Security Specialty; ISO 27001 LA/LI; PCI ISA/QSA (if applicable).Why choose GSPANN“We GSPANNians” are at the heart of the technology that we pioneer. We do not service our customers, we co-create.With the passion to explore solutions to the most challenging business problems, we support and mentor the technologist in everyone who is a part of our team. This translates into innovations that are path-breaking and inspirational for the marquee clients, we co-create a digital future with.GSPANN is a work environment where you are constantly encouraged to sharpen your abilities and shape your growth path, We support you to become the best version of yourself by feeding your curiosity, providing a nurturing environment, and giving ample opportunities to take ownership, experiment, learn and succeed.We’re a close-knit family of more than 2000+ people that supports one another and celebrates successes, big or small. We work together, socialize together, and actively serve the communities we live in.We invite you to carry forward the baton of innovation in technology with us.At GSPANN, we do not service. We Co-create.Discover your inner technologist - Explore and expand the boundaries of tech innovation without the fear of failure.Accelerate your learning - Shape your career while scripting the future of tech. Seize the ample learning opportunities to grow at a rapid paceFeel included - At GSPANN, everyone is welcome. Age, gender, culture, and nationality do not matter here, what matters is YOUInspire and Be Inspired - When you work with the experts, you raise your game. At GSPANN, you’re in the company of marquee clients and extremely talented colleaguesEnjoy Life - We love to celebrate milestones and victories, big or small. Ever so often, we come together as one large GSPANN familyGive Back - Together, we serve communities. We take steps, small and large so we can do good for the environment, weaving in sustainability and social change in our endeavors.We invite you to carry forward the baton of innovation in technology with us.Let’s Co-create.

Apply Now