Role & responsibilities

We are seeking an experienced Vulnerability Management SME & Program Manager to lead and manage the enterprise vulnerability management program across IT, OT, and cloud environments. The role requires expertise in Qualys, Rapid7, Nessus, and strong experience in risk-based prioritization, system hardening, and stakeholder engagement.
Lead Communication with application owners for crown jewel application vulnerability remediation.
SOPs template & KEDB’s, including documentation of remediation procedures, align with application ecosystem consideration.
Lead end-to-end vulnerability management lifecycle (scan, prioritize, remediate, report)
Implement risk-based prioritization frameworks (CVSS, threat intel, business impact)
Drive migration to the newly identified VM tool as directed by the senior management.
Manage and optimize tools: Qualys, Rapid7, Nessus or other open sources.
Design custom dashboards and executive reports and present them to secure management (Power BI / tool-based)




Drive secure configuration baselines (Golden Images) using NIST & CIS benchmarks
Provide impact analysis and remediation guidance to stakeholders
Manage vulnerabilities across manufacturing/OT, legacy systems, and hybrid cloud environments
Ensure integration with change management, patching, and incident response
Lead stakeholder communication, governance meetings, and executive presentations

Key skills required
10+ years in cybersecurity with a focus on vulnerability management
Solid expertise in NIST, CIS, and CISA best practices
Experience in manufacturing/OT and legacy settings
Knowledge of hybrid cloud (AWS/Azure/GCP/OCI)
Robust dashboarding, reporting, and communication skills
Experience in handling SAP, Engineering applications and database vulnerability management.
Experience in program management and cross-functional leadership

Preferred candidate profile

📌 Vulnerability Management Sme Pune
🏢 Talworx Solutions
📍 Pune