We use cookies for the best user experience on our website, including to personalize content & offerings, to provide social media features and to analyze traffic. By clicking “Accept All Cookies” you agree to our use of cookies. You can also manage your cookies by clicking on the "Cookie Preferences" and selecting the categories you would like to accept. For more information on how we use cookies please visit our and Modify Cookie Preferences
Reject All Cookies Accept All Cookies
Track Lead (Support & Operations)
India
Job Description
Track Lead (Support & Operations)
Pune, MaharashtraBengaluru, Karnataka
Job Summary
Project Manager / Technical Lead - Vulnerability Enrichment Tool (VET) Close & Verify Governance
Job Description Summary
The Project Manager / Technical Lead will be responsible for coordinating, governing, and driving the end-to-end Vulnerability Enrichment Tool (VET) Close & Verify process across all CIO areas. This role acts as the central point of coordination between Engineering teams, Application Owners, SMEs, Security teams, and senior stakeholders to ensure timely remediation, verification, reporting, and governance of vulnerability management activities.
The successful candidate will combine strong project management, technical leadership, stakeholder management, and operational governance skills to drive remediation outcomes, improve process effectiveness, and enhance adoption of VET and Control Workbench (CWB) capabilities across Deutsche Bank Technology.
Education
Bachelor's / Master's Degree in Computer Science, Information Technology, Engineering, Cyber Security, Mathematics, or equivalent practical experience.
Experience
- 10+ years of qualified experience in Technology, Cyber Security, Risk Management, Application Development, Infrastructure, or Technology Governance functions.
- 5+ years of project/program management experience managing complex cross-functional initiatives.
- Proven experience working with technology engineering teams, application owners, and senior stakeholders.
- Experience delivering large-scale remediation, transformation, or regulatory initiatives.
- Experience operating within global organizations and distributed teams.
- Strong knowledge of SDLC, DevOps, Vulnerability Management, and IT Risk Management frameworks.
- Experience working within regulated financial institutions is highly desirable.
Key Responsibilities
Key Responsibilities
VET Close & Verify Governance
- Lead and coordinate the VET "Close & Verify" process across all CIO organizations.
- Drive vulnerability remediation activities from identification through closure verification.
- Ensure timely review and disposition of vulnerability buckets generated through VET.
- Coordinate with ITAOs, Delegates, Engineers, Developers, SMEs, and Security teams to achieve remediation targets.
- Govern vulnerability remediation KPIs, SLAs, and risk reduction objectives.
- Track remediation progress and escalate risks, blockers, and aging vulnerabilities where appropriate.
- Drive continuous improvement of vulnerability handling processes and governance controls.
Stakeholder Management
- Serve as the primary point of contact between CIO teams, CSO Cyber Hygiene teams, engineering functions, and governance forums.
- Facilitate daily and weekly remediation review sessions with engineering teams.
- Coordinate cross-functional working groups to resolve complex vulnerability remediation challenges.
- Present status updates, metrics, risks, and remediation progress to senior management.
- Build effective relationships across Technology, Information Security, Risk, and Audit stakeholders.
Operational Effectiveness & Process Improvement
- Drive automation opportunities across vulnerability ingestion, analysis, remediation tracking, and reporting.
- Identify process bottlenecks and implement operational improvements.
- Support enhancement initiatives within Control Workbench (CWB) and VET.
- Promote end-to-end traceability from vulnerability identification through close and verify activities.
- Support onboarding, training, awareness, and adoption activities across the Technology organization.
Reporting & Governance
- Monitor and report on:
- Vulnerability remediation progress
- Open and overdue findings
- Exception management status
- Risk exposure trends
- CIO and application-level performance metrics
- Support governance forums and steering committees with actionable insights and recommendations.
- Ensure audit-ready evidence and remediation traceability are maintained.
Risk & Exception Management
- Coordinate central exception review processes.
- Ensure proper documentation and approval of risk acceptances and exceptions.
- Validate remediation evidence submitted by engineering teams.
- Support regulatory, audit, and internal review activities relating to vulnerability management.
Skill Requirements
Mandatory Skills
Project & Program Management
- Strong project management and delivery leadership experience.
- Experience managing multiple concurrent workstreams across global organizations.
- Proven ability to drive delivery against challenging timelines.
- Strong planning, prioritization, and organizational skills.
- Experience managing executive stakeholders and governance forums.
Technical Leadership
- Strong understanding of software engineering and infrastructure environments.
- Working knowledge of:
- Vulnerability Management
- Application Security
- SDLC
- DevOps
- Cloud Platforms
- Infrastructure Operations
- Ability to engage effectively with developers, engineers, architects, and security professionals.
- Experience translating technical issues into management-level reporting.
Communication & Stakeholder Management
- Excellent verbal and written communication skills.
- Strong facilitation and workshop leadership skills.
- Ability to influence stakeholders at all organizational levels.
- Experience working with senior technology executives and governance bodies.
Preferred Skills
- Experience with vulnerability management platforms.
- Experience using Control Workbench (CWB) or similar governance tooling.
- Knowledge of vulnerability assessment frameworks including:
- CVE
- CVSS
- Vulnerability Scanning methodologies
- Cyber Hygiene processes
- Knowledge of patch management and infrastructure remediation processes.
- Experience working on regulatory remediation programs.
- Experience in audit, risk, compliance, or governance functions.
- Familiarity with Agile, Scrum, and DevOps delivery models.
- Knowledge of ServiceNow, JIRA, Confluence, and Power BI.
Core Competencies
- Strong leadership and influencing skills.
- Excellent analytical and investigative abilities.
- Ability to operate effectively under pressure and manage competing priorities.
- Strong ownership mindset and attention to detail.
- Customer-focused and outcome-driven approach.
- Excellent collaboration and relationship-building skills.
- Ability to drive change and process transformation.
- Commitment to operational excellence, governance, and continuous improvement.
Success Measures
The successful candidate will be accountable for:
- Reduction in aging vulnerabilities and open remediation backlog.
- Improved Close & Verify completion rates across CIO areas.
- Increased remediation and verification accuracy.
- Enhanced operational efficiency through automation.
- Improved dashboard transparency and management reporting.
- Strong governance, auditability, and end-to-end traceability.
- Effective stakeholder engagement and process adoption.
- Reduction of risk exposure across Technology platforms.
Other Requirements
NA
Information at a Glance
Why HCLTech?
At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.
HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.
Copyright © 2026 HCL Technologies Limited
×
Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies
Show More Details
Required Cookies Provider Description Enabled
SAP as service provider
We use the following session cookies, which are all required to enable the website to function:
- "route" is used for session stickiness
- "careerSiteCompanyId" is used to send the request to the correct data center
- "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
- "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another
Cookies from provider SAPasserviceprovider are required and cannot be turned off
Functional Cookies
These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies.
Consent to all Functional Cookies
Show More Details
Functional Cookies Provider Description Enabled
Vimeo
Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos.
Consent to cookies from provider Vimeo
YouTube
YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos.
Consent to cookies from provider YouTube
Advertising Cookies
These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies.
Consent to all Advertising Cookies
Show More Details
Advertising Cookies Provider Description Enabled
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic.
Consent to cookies from provider GoogleAnalytics
Google Tag Manager
Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketing, and more.
Consent to cookies from provider GoogleTagManager
LinkedIn
LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn.
📌 Track Lead (Support & Operations) (India)
🏢 HCLTech
📍 India