Job Summary
Responsible for end-to-end governance of vulnerability remediation and patching lifecycle in enterprise environments. Vulnerability inputs (scan results) are provided by the Security team; the role focuses on prioritization, governance, risk-based remediation, and stakeholder management.
Key Responsibilities
Interface with Security team for vulnerability intake, prioritization, and reporting alignment • Govern vulnerability remediation lifecycle based on security inputs • Define prioritization strategy using risk, criticality, and threat context • Drive remediation governance forums and stakeholder reviews • Ensure SLA adherence and backlog reduction for vulnerabilities • Perform root cause analysis for recurring vulnerabilities • Develop SOPs, runbooks, and process optimization initiatives • Provide technical leadership and mentoring to L1/L2 teams
Skill Requirements
Strong understanding of vulnerability management lifecycle and risk management • Experience in multi-tool vulnerability environments (tool agnostic) • Expertise in Windows/Linux patching and system administration • Automation using scripting or orchestration tools • Strong stakeholder communication and leadership capabilities
Other Requirements
NA