Job Summary

Vulnerability Response Management

- Assume operational ownership of notable vulnerabilities following VA assessment and prioritisation.
- Drive end-to-end response activities for zero-day, out-of-band (OOB), actively exploited, and other high-profile vulnerabilities.
- Coordinate cross-functional stakeholders to execute mitigation and remediation activities.
- Establish and lead vulnerability response bridges, action tracking, and escalation activities.
- Drive execution of vulnerability response playbooks and response procedures
- Maintain continuous oversight of vulnerability response activities until risk mitigation or remediation is completed.

Incident Management & Stakeholder Coordination

- Leverage Incident Management processes to accelerate remediation and stakeholder mobilisation.
- Coordinate Cyber Defence, Platform Teams, Asset Owners, Technology SMEs, and Incident Management teams during vulnerability events.
- Drive stakeholder communications, executive updates, situation reporting, and escalation activities.
- Escalate critical risks, blockers, and delayed remediation activities through appropriate governance channels.
- Support post-incident reviews and continuous improvement initiatives.

Remediation Oversight

- Drive remediation activities through to closure, ensuring accountability and timely execution.
- Track remediation commitments, milestones, dependencies, and residual risks.
- Challenge and escalate overdue actions where required.
- Validate completion of agreed mitigation and remediation actions.
- Support management reporting on remediation progress and risk reduction outcomes.

Key Responsibilities

Key Skills & Experience

Vulnerability Management

- Strong understanding of vulnerability management concepts,



CVE, CVSS, exploitability assessment, threat intelligence, and cyber risk management.
- Ability to understand vulnerability assessments and translate risk into actionable remediation plans.
- Knowledge of vulnerability prioritisation, attack surface exposure, and threat landscape trends.

Incident & Crisis Management

- Experience coordinating Major Incident, Cyber Incident, or Technology Incident response activities.
- Strong understanding of escalation management, crisis communications, and stakeholder coordination.
- Experience leading bridge calls, action tracking, executive reporting, and operational response activities

Remediation Governance & Oversight

- Experience driving remediation activities across multiple technology and infrastructure teams.
- Understanding of remediation governance, risk reduction strategies, compensating controls, and risk treatment plans.
- Ability to influence stakeholders and drive accountability for remediation outcomes.

Skill Requirements

Professional Competencies

- Strong problem-solving skills with the ability to analyse complex cyber risk scenarios, identify response strategies, and drive issues to resolution.
- Excellent communication and stakeholder management skills with the ability to engage technical teams, senior management, and incident stakeholders during high-pressure situations.




- Strong analytical capability with experience interpreting and correlating large volumes of vulnerability, threat intelligence, asset inventory, remediation, and operational data to support risk-based decision making.
- Ability to translate technical vulnerability information into clear business risk, operational impact, and remediation priorities.
- Up-to-date knowledge of vulnerability management practices, emerging threats, vulnerability intelligence, exploit trends, and cyber threat landscape developments.
- Self-driven, proactive, and capable of operating independently within a fast-paced 24x7 response environment.
- Strong execution focus with the ability to coordinate multiple stakeholders and drive timely remediation outcomes.
- Ability to remain calm under pressure and make sound decisions during critical cyber events.
- Comfortable working in ambiguous situations and making risk-based decisions with incomplete information.
- Highly collaborative with a solid sense of ownership and accountability.

Must Have Skill

Nessus,Vulnerability & Compliance Remediation

Valuable to Have Skill

Other Requirements

Preferred Experience

- 5–8 years of experience in Vulnerability Management, Security Operations, Incident Response, Technology Risk, Cyber Defence, or related cyber security disciplines.
- Hands-on experience of MS SQL.
- Experience supporting 24x7 security operations, on-call rotations, or major incident management activities.
- Experience managing critical cyber incidents, zero-day vulnerabilities, and actively exploited threats.
- Experience working within a highly regulated environment such as financial services.

📌 SME - NESSUS, Compliance Remediation (India)
🏢 HCLTech
📍 India