Manager

Manager / APM Vulnerability Management SME & Program Manager

Location: Pune
Experience: 10+ Years
Salary: Up to 24 LPA
Employment Type: Full-Time
Work Mode: In Office

About this job :

we are looking for an experienced Vulnerability Management SME & Program Manager to lead and manage the enterprise vulnerability management program across IT, OT, cloud, legacy and hybrid environments. The ideal candidate will have strong expertise in vulnerability management tools, risk-based prioritization, security hardening, remediation governance and stakeholder management.

Key Responsibilities

• Lead communication with application owners for remediation of vulnerabilities affecting crown-jewel applications.
• Manage the complete vulnerability management lifecycle: scanning, assessment, prioritization, remediation, tracking and reporting.
• Implement risk-based prioritization using CVSS, threat intelligence and business impact.
• Manage and optimize vulnerability management tools such as Qualys, Rapid7, Nessus and other relevant platforms.
• Drive migration to new vulnerability management tools as directed by senior management.
• Develop and maintain SOPs, remediation templates and KEDBs, considering application and technology ecosystems.
• Design customized dashboards and executive reports using Power BI and security tools.
• Drive secure configuration baselines and Golden Images using NIST and CIS benchmarks.
• Provide vulnerability impact analysis and remediation guidance to technical and business stakeholders.
• Manage vulnerabilities across manufacturing/OT environments, legacy systems and hybrid cloud environments.
• Work closely with change management, patching and incident response teams.
• Lead governance meetings, stakeholder communications and executive-level presentations.
• Provide program-level oversight and ensure timely remediation of critical and high-risk vulnerabilities.

Key Skills & Qualifications

• 10+ years of experience in Cybersecurity, with strong focus on Vulnerability Management.
• Strong expertise in NIST, CIS and CISA security best practices.
• Hands-on experience with Qualys, Rapid7, Nessus or equivalent vulnerability management platforms.
• Strong understanding of risk-based vulnerability prioritization, CVSS and threat intelligence.
• Experience with manufacturing/OT environments and legacy systems.
• Knowledge of AWS, Azure, GCP or OCI and hybrid cloud security.
• Experience managing vulnerabilities across SAP, engineering applications and databases.
• Strong understanding of system hardening, security baselines and CIS/NIST benchmarks.
• Experience with dashboarding, reporting and executive presentations.
• Strong program management, governance, stakeholder management and cross-functional leadership skills.
• Experience integrating vulnerability management with patch management, change management and incident response.
• Bachelor's degree or above in Computer Science, Information Technology, Cybersecurity or a related discipline.

Preferred Skills

Vulnerability Management | Qualys | Rapid7 | Nessus | NIST | CIS | CISA | CVSS | OT Security | Cloud Security | SAP Security | Patch Management | Risk Management | Power BI | Program Management

What We Are Looking For

We are seeking a cybersecurity professional who can combine deep vulnerability management expertise with strong program and stakeholder management capabilities and drive enterprise-wide remediation initiatives from identification through closure.