Start searching
Back to Jobs
Recently postedFull timeOther

EVM Cunsultant_MAST

KPMG Global ServicesBengaluru🇮🇳India

Quick overview

SeniorityMid Senior
Employment typeFull Time
Work modeHybrid
LocationBengaluru, India
ComplianceRisk AssessmentServiceNow

Job description

  • Security Specialist/Assistant Manager

  • Role Summary:

  • • Lead Enterprise Vulnerability Management (EVM) activities across servers, workstations, cloud, network, and application assets.

  • • Perform vulnerability analysis, risk assessment, prioritization, and remediation tracking based on CVSS, exploitability, threat intelligence, and business impact.

  • • Drive Vulnerability Prioritization and Remediation (VPR) activities, including Code Red / Code Black / Code Yellow / Code Green campaigns within defined SLA timelines.

  • • Conduct CVE analysis, zero-day vulnerability assessments, threat exposure reviews, and proactive monitoring of security advisories and threat intelligence feeds.

  • • Prepare Vulnerability Action Memos (VAMs), executive communications, impact assessments, and remediation recommendations for critical vulnerabilities.

  • • Perform asset ownership mapping, application impact analysis, UAI identification, and stakeholder coordination using Qualys, ServiceNow, and enterprise asset repositories.

  • • Drive vulnerability remediation with application, infrastructure, cloud, network, and business stakeholders.

  • • Manage Secure Code Campaign governance, remediation tracking, compliance reporting, and vulnerability exception management.

  • • Administer and support the Qualys VMDR platform, including scanners, cloud agents, connectors, policy compliance, and reporting.

  • • Monitor vulnerability SLAs, compliance metrics, backlog reduction initiatives, governance reviews, and escalation activities.

  • • Prepare executive dashboards, RCA, POA, ETA reports, governance metrics, and stakeholder communications.

  • • Coordinate Sev 1 to Sev 5 vulnerability remediation activities and support audit, compliance, and regulatory requirements.

• Lead Enterprise Vulnerability Management (EVM) activities across servers, workstations, cloud, network, and application assets.

• Perform vulnerability analysis, risk assessment, prioritization, and remediation tracking based on CVSS, exploitability, threat intelligence, and business impact.

• Drive Vulnerability Prioritization and Remediation (VPR) activities, including Code Red / Code Black / Code Yellow / Code Green campaigns within defined SLA timelines.

• Conduct CVE analysis, zero-day vulnerability assessments, threat exposure reviews, and proactive monitoring of security advisories and threat intelligence feeds.

• Prepare Vulnerability Action Memos (VAMs), executive communications, impact assessments, and remediation recommendations for critical vulnerabilities.

• Perform asset ownership mapping, application impact analysis, UAI identification, and stakeholder coordination using Qualys, ServiceNow, and enterprise asset repositories.

• Drive vulnerability remediation with application, infrastructure, cloud, network, and business stakeholders.

• Manage Secure Code Campaign governance, remediation tracking, compliance reporting, and vulnerability exception management.

• Administer and support the Qualys VMDR platform, including scanners, cloud agents, connectors, policy compliance, and reporting.

• Monitor vulnerability SLAs, compliance metrics, backlog reduction initiatives, governance reviews, and escalation activities.

• Prepare executive dashboards, RCA, POA, ETA reports, governance metrics, and stakeholder communications.

• Coordinate Sev 1 to Sev 5 vulnerability remediation activities and support audit, compliance, and regulatory requirements.

Prior Experience:

The candidate must have 6 to 8 years of relevant experience in a similar role, preferably in a professional services organization.

Similar jobs

Apply on employer’s website