Country/Region:  IN
Requisition ID:  19015
Work Model: 
Position Type: 
Salary Range: 
Location:  INDIA - HYDERABAD - BIRLASOFT OFFICE

Title:  Project Manager

Description: 

Responsibilities:

  • Working on Vulnerability Management Program focused on ensuring that vulnerabilities within the organization are quickly identified, triaged, tracked, and appropriately remediated.
  • Working with cross-functional, global stakeholders to drive remediation programs and ensuring proper remediation of vulnerabilities till closure.
  • Working on various vulnerability scanning reports- Assessing, validating, and triaging vulnerabilities- Ensure organizational vulnerabilities are properly documented, tracked, and addressed.
  • Working closely with internal stakeholders to address reported vulnerabilities to ensure timely remediation or approved exception and ad-hoc scan.
  • Clearly advises stakeholders and technical teams on vulnerabilities, criticality, impacts, and remediation to meet information security standards.
  • Develops remediation reports, out briefs, and scorecards addressing risk, vulnerability, and organizational progress.
  • Providing regular reports and updates to senior management on the status of the vulnerability management program, including progress on remediation efforts and any critical vulnerabilities requiring immediate attention.
  • Working on all other Security, Risk & Compliance issues within the Organization.
  • Experience in IT, Cybersecurity, Risk / Vulnerability Analysis or Management, or related fields.
  • Strong knowledge of vulnerability management processes, tools, best practices, and vulnerability validation and triaging.
  • Experience with industry-standard enterprise vulnerability scanning offerings, such as Qualys, Nexus IQ, Fortify, Key light, Datamart, Splunk etc.
  • Vulnerability Management experience within containerization platforms (Docker, Kubernetes, etc.) and major cloud environments (AWS, Azure etc.)
  • Familiarity with security frameworks and standards, such as PCI DSS, NIST, ISO 27001, OWASP Top 10, or Critical Security Controls.