Cyber Security Patching & Compliance

NTT DATA; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

NTT DATA is seeking a Cyber Security Patching Compliance specialist in Pune, Maharashtra, India. You will support end-user security, compliance and governance across Windows desktop apps and end-user devices, and provide audit-ready evidence for regulatory requirements.

You will monitor vulnerabilities, track unsupported software and lifecycle risks, coordinate remediation with Engineering and IT teams, manage exception governance, and run patching interlocks to meet defined compliance targets.

Responsibilities

• Monitor the end-user compliance posture across devices, operating systems and end-user applications, working with Cyber Security, engineering and service owners to review vulnerabilities, prioritise risk and initiate remediation activity.
• Track vulnerabilities, unsupported software versions, end-of-life platforms and non-compliant configurations through to closure, ensuring ownership, target dates, risk status and escalation points are clearly recorded.
• Coordinate remediation activities with engineering teams, product owners, application owners, service owners and patch management teams to ensure risks are prioritised, delivery plans are agreed and progress is tracked against defined timelines.
• Manage exception processes and governance reviews, ensuring exceptions are risk-assessed, time-bound, approved by the appropriate owners and reviewed regularly until remediation or formal closure.
• Run patching interlocks with engineering, operations, security and service teams to review deployment progress, blockers, risk acceptance decisions, escalation items and actions required to meet compliance targets.
• Validate compliance reporting, exclusions, and scope definitions.
• Support audit and regulatory evidence requests
• Drive reduction of End User related security risks.

Job description

Role Purpose

This job description is intended to define the common expectations for resources supporting end-user security, compliance and governance across end-user applications. The role will operate across technology, security, product, application and service teams to strengthen compliance oversight, improve remediation discipline and provide reliable evidence for audit and regulatory requirements.

Role Summary

• Supports end-user security, compliance and governance across workplace devices, operating systems and end-user applications.
• Monitors compliance posture and works with Cyber Security, engineering and service teams to review vulnerabilities and drive remediation.
• Tracks vulnerabilities, unsupported software, end-of-life platforms and non-compliant configurations through to closure.
• Coordinates remediation activity across product owners, application owners, service owners and patch management teams.
• Manages exception governance, ensuring risks are assessed, approved, time-bound and reviewed until closure.
• Provides reliable compliance reporting, audit evidence and control documentation to support technology, risk and regulatory requirements.

Key Responsibilities

• Monitor the end-user compliance posture across devices, operating systems and key end-user applications, working with Cyber Security, engineering and service owners to review vulnerabilities, prioritise risk and initiate remediation activity.
• Track vulnerabilities, unsupported software versions, end-of-life platforms and non-compliant configurations through to closure, ensuring ownership, target dates, risk status and escalation points are clearly recorded.
• Coordinate remediation activities with engineering teams, product owners, application owners, service owners and patch management teams to ensure risks are prioritised, delivery plans are agreed and progress is tracked against defined timelines.
• Manage exception processes and governance reviews, ensuring exceptions are risk-assessed, time-bound, approved by the appropriate owners and reviewed regularly until remediation or formal closure.
• Run patching interlocks with engineering, operations, security and service teams to review deployment progress, blockers, risk acceptance decisions, escalation items and actions required to meet compliance targets.
• Validate compliance reporting, exclusions, and scope definitions.
• Support audit and regulatory evidence requests
• Drive reduction of End User related security risks.

Specific Job Description – Windows Desktop Applications Compliance, security applications compliance Vulnerability Governance

• Provide governance and oversight for Windows desktop application compliance , core security applications compliance to ensure applications remain supported, secure, compliant, and remediated within defined risk and regulatory requirements.
• Monitor Windows desktop application compliance posture and track vulnerabilities, unsupported versions, and application lifecycle risks.
• Coordinate remediation activities with Engineering, Application Owners, Technology Owners, ITAOs, and Patch Management teams.
• Manage desktop application exception processes and governance reviews, ensuring exceptions are documented, risk-assessed, time-bound, and reviewed through to closure.
• Run patching interlocks to review deployment progress, blockers, remediation ownership, and escalation requirements.
• Validate compliance reporting, exclusions, scope definitions, and dashboard outputs for Windows desktop application compliance.
• Support audit and regulatory evidence requests for individual Windows…

We are currently seeking a Cyber Security Patching Compliance to join our team in Pune, Mahārāshtra (IN-MH), India (IN).

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization,