Senior Analyst – Threat & Vulnerability Management

Overview

Senior Analyst leading the identification, prioritization, tracking and remediation governance of critical security vulnerabilities across the enterprise, acting as liaison between cybersecurity, infrastructure, application and business teams.

What you'll do

• Lead end-to-end management of critical and high-risk vulnerabilities, ensuring remediation aligns with organizational SLAs and security policies.
• Monitor and analyze vulnerability data from ServiceNow Vulnerability Response and vulnerability scanning platforms to identify aged, recurring and high-impact risks.
• Validate vulnerability records, asset ownership mappings, assignment groups, risk scores and remediation status.
• Drive accountability by assigning, tracking and escalating remediation activities across infrastructure, cloud, network, application and endpoint teams.
• Evaluate remediation plans, compensating controls and exception requests to ensure appropriate risk treatment decisions.
• Support vulnerability prioritization using CVSS scores, exploitability, threat intelligence, business criticality and asset context.
• Act as subject matter expert for ServiceNow Vulnerability Response workflows and reporting.
• Develop and maintain dashboards, workflows, reports and KPIs to improve vulnerability management effectiveness.
• Identify process inefficiencies and recommend automation opportunities.
• Partner with platform teams to improve vulnerability response processes and governance controls.
• Engage technical teams, application owners, infrastructure teams and business stakeholders to obtain remediation commitments and timelines.
• Facilitate remediation discussions, risk reviews and vulnerability governance meetings.
• Provide guidance to stakeholders on remediation best practices and prioritization strategies.
• Escalate SLA breaches, chronic offenders and unresolved critical vulnerabilities to leadership and risk governance forums.
• Mentor junior analysts on vulnerability management processes and cybersecurity best practices.
• Perform advanced analysis of vulnerability trends, remediation performance, recurring findings and ownership gaps.
• Develop metrics and reporting on SLA compliance, vulnerability aging, risk exposure trends, remediation effectiveness, business unit performance and executive risk posture.
• Create and maintain dashboards using ServiceNow, Excel, Power BI or similar tools.
• Identify systemic issues and strategic improvement opportunities across security and IT operations.
• Prepare executive-ready dashboards, scorecards and presentations for cybersecurity and technology leadership.
• Present vulnerability trends, key risks, remediation progress and strategic recommendations during governance and leadership reviews.
• Provide risk-based insights and recommendations to support decision-making and security investment priorities.
• Communicate complex technical findings to both technical and non-technical audiences.

What you'll need

• 10–12 years of overall IT and Cybersecurity experience, with at least 5+ years focused on Vulnerability Management, Security Operations, Risk Management or Cyber Defense functions.
• Hands-on experience with ServiceNow Vulnerability Response and/or ITSM platforms.
• Strong understanding of the vulnerability management lifecycle, risk assessment methodologies and remediation workflows.
• Experience with enterprise vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz or Microsoft Defender Vulnerability Management.
• Strong knowledge of CVSS scoring, Common Vulnerabilities and Exposures (CVEs), asset criticality, patch management, and risk and exception management.
• Advanced proficiency in Excel, Power BI and PowerPoint.
• Experience interacting with senior leadership and presenting cybersecurity metrics and risk posture updates.
• Strong analytical, problem-solving and stakeholder management skills.

Nice to have

• Bachelor's degree in Computer Science, Information Security, Information Technology or related field.
• Industry certifications such as CISSP, CISM, GSEC, Security+, CRISC, GIAC Vulnerability Management certifications.
• Experience with cloud security platforms and cloud-native vulnerability management.
• Knowledge of NIST Cybersecurity Framework, CIS Controls, ISO 27001 and PCI DSS.
• Experience leading vulnerability governance programs in large enterprise environments.

Details

• Location: Bangalore, Karnataka; preference for the Whitefield PSN Office, Bangalore, KA.
• Works onsite five days a week.
• Visa sponsorship is not available for this position.