- Own the end-to-end vulnerability management lifecycle across multiple environments (test, staging, DR, production).
-
Coordinate and oversee vulnerability scanning activities using enterprise-grade tools over appliances, VMs and containers.
-
Prioritize findings based on risk, ensure timely remediation with IT/Application teams, and track closure.
-
Coordinate internal and external penetration testing engagements with third-party vendors.
-
Review penetration test reports, validate findings, and follow up remediation until closure.
-
Act as the technical bridge between assessors and internal technical teams.
-
Run assurance activities across security controls (e.g., Firewall, EDR, AV, DLP, Sandbox, etc.).
-
Ensure findings are remediated and closed within agreed SLAs and security baselines.
-
Supervise POC activities for security tools and controls.
Support requirement validation, testing, and evaluation during information security initiatives.
Requirements-
Bachelor’s degree in computer science, Information Systems, or equivalent education
- +6 years of experience in the InfoSec.
- Proven hands-on experience in vulnerability management and penetration testing coordination.
-
Strong understanding of security controls, system hardening, and risk assessment.
-
Experience working closely with IT, Infrastructure, and Application teams.
-
Ability to translate technical findings into clear, actionable remediation steps.
-
Prior experience in a regulated environment (FinTech, banking is preferred) is a strong plus.
-
Security certifications such as CISSP, CISM, CRISC, CEH, or equivalent are an advantage.