01Overview
Role & responsibilities
We are seeking an experienced Vulnerability Management SME & Program Manager to lead and manage the enterprise vulnerability management program across IT, OT, and cloud environments. The role requires expertise in Qualys, Rapid7, Nessus, and strong experience in risk-based prioritization, system hardening, and stakeholder engagement.
Lead Communication with application owners for crown jewel application vulnerability remediation.SOPs template & KEDBs, including documentation of remediation procedures, align with application ecosystem consideration.Lead end-to-end vulnerability management lifecycle (scan, prioritize, remediate, report)Implement risk-based prioritization frameworks (CVSS, threat intel, business impact)Drive migration to the newly identified VM tool as directed by the senior management.Manage and optimize tools: Qualys, Rapid7, Nessus or other open sources.Design custom dashboards and executive reports and present them to secure management (Power BI / tool-based)Drive secure configuration baselines (Golden Images) using NIST & CIS benchmarksProvide impact analysis and remediation guidance to stakeholdersManage vulnerabilities across manufacturing/OT, legacy systems, and hybrid cloud environmentsEnsure integration with change management, patching, and incident responseLead stakeholder communication, governance meetings, and executive presentations
Key skills required
10+ years in cybersecurity with a focus on vulnerability managementStrong expertise in NIST, CIS, and CISA best practicesExperience in manufacturing/OT and legacy environmentsKnowledge of hybrid cloud (AWS/Azure/GCP/OCI)Strong dashboarding, reporting, and communication skillsExperience in handling SAP, Engineering applications and database vulnerability management.Experience in program management and cross-functional leadership
Preferred candidate profile .
