[Hiring] Vulnerability Lead / SME @Inficare Technologies

Role Description

The Vulnerability Lead / Subject Matter Expert will provide end-to-end leadership for the vulnerability management service. The role will establish governance, translate technical exposure into business risk, drive remediation accountability, and serve as the primary coordination point across security, infrastructure, cloud, application, risk, and compliance stakeholders.

Key Responsibilities

• Own the vulnerability management operating model, governance cadence, service controls, prioritization framework, and continuous-improvement roadmap across in-scope technology environments.
• Prioritize vulnerabilities using severity, exploitability, threat intelligence, asset criticality, business exposure, regulatory impact, and the availability of compensating controls.
• Lead weekly operational reviews, risk and remediation forums, aging reviews, SLA breach discussions, and executive governance meetings with clear decisions, owners, and due dates.
• Drive accountability with infrastructure, cloud, application, platform, and service teams; identify remediation blockers and escalate unresolved risks through defined management channels.
• Produce concise executive dashboards and narratives covering exposure, aging, SLA performance, critical-risk trends, exceptions, remediation throughput, recurring causes, and forecasted risk reduction.
• Coordinate internal and external audit support, including control walkthroughs, evidence collection, issue clarification, management responses, and closure tracking for vulnerability-related findings.
• Provide technical guidance on remediation strategy, emergency response, risk acceptance, compensating controls, patch sequencing, and treatment of vulnerabilities affecting critical services.

Qualifications

• Strong hands-on knowledge of enterprise vulnerability management, risk-based prioritization, infrastructure and cloud security.
• Experience leading cross-functional governance in a regulated financial-services environment.
• Ability to convert technical findings into clear executive-level risk and remediation messages.
• Working knowledge of vulnerability scanners, ticketing/ITSM, CMDB, reporting, exception, and GRC processes.
• Strong stakeholder management, audit support, decision facilitation, and written communication skills.

Success Measures

Successful performance will be evaluated through timely risk reduction, SLA adherence, accuracy of records and reporting, quality of stakeholder coordination, audit readiness, and measurable improvement in remediation efficiency and control effectiveness.