EVM Cunsultant_MAST
- LocationBangalore, Karnataka, India; Pune, Maharashtra, India
- Work typeNot stated
- EmploymentFull-time
- Posted29 October 2026
- SourceKPMG Global Services's careers page (Oracle Recruiting)
Live checkFirst seen 7 days ago; still listed on KPMG Global Services's careers page 44 min ago.
Moves fastWhen KPMG Global Services takes a role down early, it is usually about 2 days after posting. Apply soon.
At a glance
- Experience6 to 8 years
- Skills and toolsServiceNow
Read from the ad by RoleFinder, with rules and an AI reading; the description is the source.
About the role
-
Security Specialist/Assistant Manager
-
Role Summary:
-
• Lead Enterprise Vulnerability Management (EVM) activities across servers, workstations, cloud, network, and application assets.
-
• Perform vulnerability analysis, risk assessment, prioritization, and remediation tracking based on CVSS, exploitability, threat intelligence, and business impact.
-
• Drive Vulnerability Prioritization and Remediation (VPR) activities, including Code Red / Code Black / Code Yellow / Code Green campaigns within defined SLA timelines.
-
• Conduct CVE analysis, zero-day vulnerability assessments, threat exposure reviews, and proactive monitoring of security advisories and threat intelligence feeds.
-
• Prepare Vulnerability Action Memos (VAMs), executive communications, impact assessments, and remediation recommendations for critical vulnerabilities.
-
• Perform asset ownership mapping, application impact analysis, UAI identification, and stakeholder coordination using Qualys, ServiceNow, and enterprise asset repositories.
-
• Drive vulnerability remediation with application, infrastructure, cloud, network, and business stakeholders.
-
• Manage Secure Code Campaign governance, remediation tracking, compliance reporting, and vulnerability exception management.
-
• Administer and support the Qualys VMDR platform, including scanners, cloud agents, connectors, policy compliance, and reporting.
-
• Monitor vulnerability SLAs, compliance metrics, backlog reduction initiatives, governance reviews, and escalation activities.
-
• Prepare executive dashboards, RCA, POA, ETA reports, governance metrics, and stakeholder communications.
-
• Coordinate Sev 1 to Sev 5 vulnerability remediation activities and support audit, compliance, and regulatory requirements.
Responsibilities
• Lead Enterprise Vulnerability Management (EVM) activities across servers, workstations, cloud, network, and application assets.
• Perform vulnerability analysis, risk assessment, prioritization, and remediation tracking based on CVSS, exploitability, threat intelligence, and business impact.
• Drive Vulnerability Prioritization and Remediation (VPR) activities, including Code Red / Code Black / Code Yellow / Code Green campaigns within defined SLA timelines.
• Conduct CVE analysis, zero-day vulnerability assessments, threat exposure reviews, and proactive monitoring of security advisories and threat intelligence feeds.
• Prepare Vulnerability Action Memos (VAMs), executive communications, impact assessments, and remediation recommendations for critical vulnerabilities.
• Perform asset ownership mapping, application impact analysis, UAI identification, and stakeholder coordination using Qualys, ServiceNow, and enterprise asset repositories.
• Drive vulnerability remediation with application, infrastructure, cloud, network, and business stakeholders.
• Manage Secure Code Campaign governance, remediation tracking, compliance reporting, and vulnerability exception management.
• Administer and support the Qualys VMDR platform, including scanners, cloud agents, connectors, policy compliance, and reporting.
• Monitor vulnerability SLAs, compliance metrics, backlog reduction initiatives, governance reviews, and escalation activities.
• Prepare executive dashboards, RCA, POA, ETA reports, governance metrics, and stakeholder communications.
• Coordinate Sev 1 to Sev 5 vulnerability remediation activities and support audit, compliance, and regulatory requirements.
Qualifications
Prior Experience :
The candidate must have 6 to 8 years of relevant experience in a similar role, preferably in a professional services organization.
Get open roles ranked against your CV
Add your CV once. RoleFinder ranks the open roles where you want to work, plus remote ones, against it, shows your best 12 with a one-line reason each, and emails you new matches once a week. The file is read once by AI and not kept; employers never see it.
Sign in with Google or email to start. How we handle your CV