Role & responsibilities

We are seeking an experienced Vulnerability Management SME & Program Manager to lead and manage the enterprise vulnerability management program across IT, OT, and cloud environments. The role requires expertise in Qualys, Rapid7, Nessus, and strong experience in risk-based prioritization, system hardening, and stakeholder engagement.

- Lead Communication with application owners for crown jewel application vulnerability remediation.
- SOPs template & KEDB’s, including documentation of remediation procedures, align with application ecosystem consideration.
- Lead end-to-end vulnerability management lifecycle (scan, prioritize, remediate, report)
- Implement risk-based prioritization frameworks (CVSS, threat intel, business impact)
- Drive migration to the newly identified VM tool as directed by the senior management.
- Manage and optimize tools: Qualys, Rapid7, Nessus or other open sources.
- Design custom dashboards and executive reports and present them to secure management (Power BI / tool-based)




- Drive secure configuration baselines (Golden Images) using NIST & CIS benchmarks
- Provide impact analysis and remediation guidance to stakeholders
- Manage vulnerabilities across manufacturing/OT, legacy systems, and hybrid cloud environments
- Ensure integration with change management, patching, and incident response
- Lead stakeholder communication, governance meetings, and executive presentations

Key skills required

- 10+ years in cybersecurity with a focus on vulnerability management
- Strong expertise in NIST, CIS, and CISA best practices
- Experience in manufacturing/OT and legacy environments
- Knowledge of hybrid cloud (AWS/Azure/GCP/OCI)
- Robust dashboarding, reporting, and communication skills
- Experience in handling SAP, Engineering applications and database vulnerability management.
- Experience in program management and cross-functional leadership

Preferred candidate profile

📌 Vulnerability Management SME (Pune)
🏢 Talworx Solutions
📍 Pune