Vulnerability Management Technical Project Lead
Job Summary
Location (Primary) - Noida
GCF Level - 3A
Role Description:- The Tech Lead/ServiceLine Lead will be responsible for the operational organisational and strategic management of activities related to Vulnerability Management (VM) CTI incidentology and COD controls. Will act as the primary interface between the Client (CYB TGITS Divisions) operational teams and governance bodies ensuring service quality performance and continuous improvement.
In addition of this governance role he/she is also responsible for delivering & managing the team. Here is the high-level scope of the responsibilities:
- Monitoring of critical P0 / P1 vulnerabilities
- Steering CTI incidentology
- Execution and governance of COD controls
- Organisation of committees and reporting
- Operational management and team skill development
- Contribution to process tool and KPI optimisation
Job Description:
- Management of Critical P0 / P1 Vulnerabilities - Promptly responding to P0/P1 vulnerabilities including identification assessment patching documentation and development of remediation plans when patching is not possible.
- Governance Specific to P0 Vulnerabilities - Coordinate and oversee P0 vulnerability follow-up meetings communicate updates and remediation progress escalate unresolved issues and ensure compliance with established deadlines.
- Organisation and Facilitation of Committees - To attend present & track regular meetings and committee sessions with vulnerability status track remediation efforts report key performance indicators and coordinate with divisions on security tools and control enhancements.
- Management of COD Controls - oversees the execution analysis and remediation of six COD controls ensuring effective risk reduction and planning for additional controls to further mitigate cyber threats.
- Team Management and Organisation - Responsible for organising and coordinating the controls and remediation team by planning activities distributing workloads managing priorities ensuring service continuity and overseeing training skills development and leave management.
- Continuous Improvement and Value Creation - Actively contribute to automation initiatives enhance data reliability optimize monitoring tools and processes drive operational efficiency and support the evolution of services to meet client expectations.
- Key Tools and Environments - Proficiency in ServiceNow SECOPS (certification preferred) vulnerability detection and monitoring tools (Microsoft Defender for Endpoint EDR/XDR WIZ NESSUS PRO Dynatrace) CMDB VISIT reporting tools (PowerBI PowerPoint) and adherence to security standards and Client SLAs is required.
Strongly Preferred Certifications
- ServiceNow SECOPS certification
- CISSP / CISM / ISO 27001 certifications
- GIAC (GREM / GCED / GCTI) certifications
- Cloud and Microsoft security certifications
Mandatory Soft Skills:
- Proven leadership experience
- Strong people management and clientfacing governance skills
- Executive communication (FR/EN written & verbal reporting
- Crisis management & escalation handling for P0/P1 situations
- Datadriven decision making using KPIs dashboards and trends
- Continuous improvement & automation mindset
Total Experience Expected: 08-10 years
Qualifications :
Bachelors degree or Masters in Computer Science Engineering or related field.
Advanced degrees or certifications are preferred
Additional Information :
This roles requires to follow CET working hours/Client business hours
At our organization we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.
All of our positions are open to people with disabilities.
Remote Work :
No
Employment Type :
Full-time
About Company
Sopra Steria, a major Tech player in Europe with 52,000* employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to- ... View more