Role Summary: The Vulnerability Remediation Governance Analyst will support the end-to-end coordination and tracking of vulnerability remediation activities across the organization. The role is responsible for monitoring remediation progress, validating SLA compliance, coordinating with infrastructure and application teams, maintaining vulnerability records in ServiceNow VR, and producing management reports and metrics. Key Responsibilities: Monitor vulnerabilities identified through Qualys and other approved assessment activities. Track remediation activities through ServiceNow Vulnerability Response (VR). Follow up with remediation owners to ensure vulnerabilities are addressed within agreed timelines. Monitor compliance against remediation SLAs based on vulnerability criticality. Track recurring vulnerabilities and aging vulnerabilities. Coordinate validation and closure of remediated vulnerabilities. Engage with infrastructure, application, endpoint, and operations teams for remediation updates. Support weekly remediation review meetings with stakeholders. Escalate overdue critical and high-risk vulnerabilities to appropriate teams.
Coordinate with Cyber Security teams regarding remediation status and exceptions. Generate weekly and monthly remediation governance reports. Track exception requests and risk acceptance records. Support compliance requirements including GDPR, DORA, and internal security policies. Provide remediation status updates during audit reviews
Key Responsibilities
kills Required: 4+ years’ of Hands-on Experience in Qualys tool and the Vulnerability Management processes. Hands-on experience using ServiceNow Vulnerability Response (VR). Ability to interpret vulnerability findings from Qualys reports. Robust knowledge of vulnerability severity, risk ratings, and remediation workflows. Experience creating reports and dashboards using Excel, Power BI, or ServiceNow reporting.
Skill Requirements
Soft skills Shall have good verbal/written communication skills Good problem-solving capability, team player, good communication and documentation skills. Should be willing to work in 24x7 environments Incumbents should carry continual system improvement mindset and able to demonstrate in work. Should have clients facing technical analysis report representation skil