Professional, Vulnerability Management Lead

Zinnov Management Consulting; Bengaluru; Hybrid; INR 2,000,000 - 4,000,000; Full time

Job summary

Zinnov Management Consulting invites applications for a Professional, Vulnerability Management Lead to join its India Global Capability Centre in Bengaluru. The role focuses on leading end-to-end vulnerability management across infrastructure and cloud environments, owning scanning, prioritization, remediation tracking, and reporting to strengthen risk posture.

The candidate will drive risk-based remediation, patch management coordination, and governance improvements while collaborating with

Qualifications

• 8+ years of cybersecurity engineering, governance or risk management experience.
• Hands-on vulnerability management and patch management with Tenable/Qualys/Rapid7.
• Experience with Tenable, Qualys, Rapid7 or similar scanning tools.
• Knowledge of risk-based prioritization and remediation workflows.
• Experience coordinating patch management across Windows, Linux and cloud environments.
• Strong SQL/Python skills for automation, reporting and analysis.
• Excellent stakeholder management and closure-driving abilities.
• Experience in global or matrixed environments preferred.
• Strong collaboration and analytical thinking.
• Ownership mindset with continuous learning.

Responsibilities

• Lead end-to-end vulnerability management across enterprise infrastructure and cloud environments.
• Own scanning, prioritization, remediation tracking and reporting to reduce risk.
• Prioritize vulnerabilities based on risk, exposure and business impact with cross-functional teams.
• Improve vulnerability management workflows, reporting and governance.
• Support security risk reduction through continuous monitoring and issue closure.
• Define risk-based prioritization models for high-impact vulnerabilities.
• Drive patch management coordination with infrastructure and application teams.
• Track and report vulnerability metrics and SLA compliance to security leadership.
• Lead scanning strategy across cloud, on-prem, and endpoint environments.
• Partner with Cloud Security and Endpoint Security teams on remediation.
• Continuously improve vulnerability management tooling and process maturity.

Skills

Cybersecurity engineering

Governance & risk management

Vulnerability management

Patch management

SQL/Python for automation

Stakeholder management

Analytical thinking

Problem solving

Ownership mindset

Tools

Tenable

Qualys

Rapid7

Job description

Zinnov is hiring for the role of Professional, Vulnerability Management Lead on behalf of our Global MNC MedTech client company a company where technology sits at the centre of everything: powering how the core business operates day to day and shaping the products and digital solutions that will define the future of patient care. This role is part of the companys establishment of their new India Global Capability Centre (GCC) in Bengaluru which will drive enterprise technology, digital transformation and innovation for its global operations and contributing to technology that ultimately helps millions of people around the world.

What you'll do

As a Professional, Vulnerability Management Lead, you will lead the end-to-end vulnerability management process across infrastructure and cloud environments. You will own scanning, prioritization, remediation tracking and reporting to help reduce risk and improve the organizations security posture.

How you'll make an impact

• Lead vulnerability scanning, validation and remediation tracking across enterprise environments
• Prioritize vulnerabilities based on risk, exposure and business impact. Partner with infrastructure, application and cloud teams to drive timely patching and remediation.
• Improve vulnerability management workflows, reporting and governance.
• Support security risk reduction through continuous monitoring and issue closure.
• Define risk-based prioritization models to focus remediation on the highest-impact vulnerabilities
• Drive patch management coordination with infrastructure and application teams
• Track and report vulnerability metrics and SLA compliance to security leadership
• Lead scanning strategy across cloud, on-prem, and endpoint environments
• Partner with Cloud Security and Endpoint Security teams on cross-functional remediation
• Continuously improve vulnerability management tooling and process maturity.

What you'll bring

Skills Required

• 8+ Years of relevant experience in cybersecurity engineering, governance, or risk management
• Hands-on experience with Vulnerability management (Tenable/Qualys/Rapid7) and patch management
• Hands-on experience with Tenable, Qualys, Rapid7 or similar vulnerability scanning tools
• Strong understanding of vulnerability assessment, risk-based prioritization and remediation workflows
• Experience coordinating patch management across Windows, Linux and cloud environments
• Strong SQL/Python skills are a plus for automation, reporting and analysis.
• Good stakeholder management and ability to drive closure across technical teams.
• Experience in global or matrixed environments is preferred
• Excellent collaboration and stakeholder management skills
• Strong problem-solving and analytical thinking
• Ownership mindset with a commitment to continuous learning