Head of VAPT & Compliance Services

About Osto

Osto is a protection-first, all-in-one cybersecurity platform that makes startups enterprise-ready in minutes - securing cloud, apps, APIs, devices, and data with real enforcement, no security engineer required.

Role Overview

Head of VAPT & Compliance Services

guide teams, define scope, review quality

Head of Security Services

What You’ll Do

• Own delivery of all VAPT & compliance engagements (scoping → proposal → execution → closure).
• Act as the primary client partner for requirements, timelines, and quality.
• Manage internal/external security partners to ensure flawless delivery.
• Build processes, frameworks, and documentation for scalable service delivery.
• Drive continuous improvement, reporting, and customer satisfaction.
• Work with product team to build VAPT tool.

What You Bring

• 4–7 years in VAPT, security services delivery, or compliance programs.
• Strong understanding of security assessments & certification workflows.
• Excellent client communication, ownership, and execution discipline.
• Ability to build and scale a services function as we grow.

Why Osto

• Lead and shape the entire security services org from day zero.
• Work directly with founders; high visibility and ownership.
• Build a premium services engine supporting a fast-scaling cybersecurity product company.