Senior Manager- Patch Management

SBI Card; Gurugram District; On-site; INR 900,000 - 1,500,000; Full time

Benefits offered by this job

Wellness program

Rewards & recognition program

Diverse and inclusive culture

Gender-neutral policy

Health benefits (Medical, Dental, OPD)

Job summary

SBI Card is seeking a seasoned professional to lead the organization-wide patch management lifecycle, transforming patching from reactive to proactive security practice. You will own discovery, prioritization, testing, deployment, and verification across operating systems and firmware.

The role requires strong communication, cross-functional collaboration, and experience in BFSI patching and governance with ISO 27001/PCI-DSS compliance.

Qualifications

• Understanding of BFSI infra, patch & vulnerability management.
• Good communication skills.
• Stakeholder and vendor management.
• 5+ years in patching and vulnerability management.
• Certifications like CompTIA Security+ or Microsoft SC-900 / CISM.

Responsibilities

• Define end-to-end patch management strategy including discovery, prioritization, testing, deployment and verification.
• Lead cross-functional discussions to ensure synchronized patching cycles across the organization.
• Governance, reporting and compliance with ISO 27001, PCI-DSS and regulatory requirements.
• Maintain audit trails and documentation for compliance and audits.
• Monitor patch SLA, risks, incidents and automation opportunities.

Skills

Patch management

Vulnerability management

Stakeholder management

Automation

Change control

Education

B.Sc/BCA / CS/IT/ Btech

Job description

Job Description:

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto Make Life Simple inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, color, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What’s in it for YOU

1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
2. Admirable work deserves to be rewarded! We have a well curated bouquet of rewards and recognition program for the employees
3. Dynamic, Inclusive and Diverse team culture
4. Gender Neutral Policy
5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
6. Commitment to overall development of an employee through comprehensive learning & development framework

Role Purpose

The purpose of this role is to lead the strategic design, implementation, and governance of the organization-wide patch management lifecycle. By transforming patching from a reactive chore into a proactive, data-driven security discipline, the role ensures smooth and efficient patching activities across multiple domains, covering operating systems, firmware, and version upgrades.

Role Accountability

1. Define and deliver end-to-end patch management strategy, covering discovery, prioritization, testing, deployment, and verification.
2. Lead cross-functional discussions & coordination to ensure synchronized patching cycles are maintained across the organization.
3. Governance, Reporting, and Compliance
4. Report on key metrics such as overall compliance, patching success rates, exceptions etc.
5. Maintain rigorous documentation and audit trails to prove compliance with frameworks like ISO 27001, PCI-DSS and other regulatory requirements.

Measures of Success

1. Meet defined compliance to regulatory bodies. Ensure No Major Audit observations, Timely closure of Audit observations
2. Patch Risk prioritization, planning, implementation, reporting and exception management
3. Incident management against patching
4. Operational Stability and Change control
5. Automation and patch tool management
6. Audits readiness and meet regulatory requirements
7. Patch SLA and compliance

Technical Skills / Experience / Certifications

1. Understanding of complete Infra for BFSI, Patch & vulnerability management
2. Good communication skills
3. Stakeholder management, Vendor management,
4. Understanding of patching tool / 5+ year experience in patching and vulnerability management CompTIA Security+ or Microsoft SC-900 / CISM

Competencies critical to the role

Risk based prioritization, Automation, Change control and operation stability, compliance and audit readiness

Qualification

B.Sc/BCA / CS/IT/ Btech

Preferred Industry

BFSI/Banking

Requirements