Vulnerability Management & Security Governance Analyst

Infosys; Plano (TX); On-site; USD 81,000 - 106,000; Full time

Benefits offered by this job

Insurance

401(k) plan

Paid holidays

Job summary

Infosys is seeking an Infrastructure Consultant 2 to drive incident resolution, root-cause analysis, and preventive recommendations across client IT infrastructures. The role emphasizes evaluating infrastructure maturity, designing scalable solutions, and ensuring smooth deployments with disciplined change control.

You will coordinate with onsite and offshore teams, document processes, and contribute to governance and security initiatives while maintaining alignment with industry standards.

Qualifications

• Ensure compliance with established risk frameworks, control requirements, and internal policy standards.
• Assist in governance activities, risk assessments, and reporting processes.
• Maintain vulnerability management standard, procedures, and guidelines.
• Identify vulnerabilities requiring risk escalation and exception review.
• Maintain documentation for risk acceptance, control validation, audit and regulatory reviews.
• Identify trends, systemic risks, and opportunities for process improvementDocument and update process flows and workflow diagrams.
• Support control effectiveness monitoring related to vulnerability remediation.
• Gather, validate, and analyze vulnerability data for governance and leadership reporting.
• Track remediation progress and SLA adherence across technology domains.
• Vulnerability governance and oversight
• Governance reporting and compliance monitoring
• Process flow documentation and workflow mapping
• Risk-based escalation and exception tracking
• Ability to ensure compliance with standards
• Technical writing skills with ability to draft standards, procedures, guidelines, and process documentation
• Ability to document and visualize process flows and governance workflows
• Risk-based thinking and analysis
• Governance and oversight mindset

Responsibilities

• Collaborate with internal and client teams to resolve complex incidents, conduct root cause analyses, and document findings with preventive recommendations.
• Participate in evaluation of client IT infrastructure, prepare actionable assessment reports, and support due diligence to document infrastructure maturity and improvement opportunities.
• Contribute to the design of scalable, cost-effective IT infrastructure solutions, review reusable components, and develop technical documentation for deployed systems.
• Align release schedules and environment readiness, execute deployments as per protocols, perform post-deployment testing, and manage version control to track changes.
• Co-ordinate maintenance schedules, emergency fixes, and technology upgrades while ensuring uninterrupted integration into existing systems and processes.
• Facilitate performance data analysis across systems, coordinate insights on system behavior, and support capacity planning to optimize performance.
• Conduct security checks, recovery drills, and compliance audits, implement security measures, and coordinate continuity plans to maintain adherence to standards.
• Gather feedback to identify automation opportunities, analyze existing infrastructure processes, and propose enhancements for efficiency gains.
• Act as liaison with onsite, offshore, and vendor teams to document project requirements, ensuring effective collaboration.
• Develop a centralized repository of technical and procedural knowledge, leveraging insights from other projects to drive efficiency and retain organizational expertise

Skills

Microsoft Excel

PowerPoint

Education

Bachelor’s degree or foreign equivalent

Job description

Infosys is seeking an Infrastructure Consultant 2 to drive incident resolution, root-cause analysis, and preventive recommendations across client IT infrastructures. The role emphasizes evaluating infrastructure maturity, designing scalable solutions, and ensuring smooth deployments with disciplined change control.

You will coordinate with onsite and offshore teams, document processes, and contribute to governance and security initiatives while maintaining alignment with industry standards.