SME NESSUS, Compliance Remediation

Job description

Vulnerability Response Management • Assume operational ownership of notable vulnerabilities following VA assessment and prioritisation. • Drive end-to-end response activities for zero-day, out-of-band (OOB), actively exploited, and other high-profile vulnerabilities. • Coordinate cross-functional stakeholders to execute mitigation and remediation activities. • Establish and lead vulnerability response bridges, action tracking, and escalation activities. • Drive execution of vulnerability response playbooks and response procedures • Maintain continuous oversight of vulnerability response activities until risk mitigation or remediation is completed. Incident Management & Stakeholder Coordination • Leverage Incident Management processes to accelerate remediation and stakeholder mobilisation. • Coordinate Cyber Defence, Platform Teams, Asset Owners, Technology SMEs, and Incident Management teams during vulnerability events. • Drive stakeholder communications, executive updates, situation reporting, and escalation activities. • Escalate critical risks, blockers, and delayed remediation activities through appropriate governance channels. • Support post-incident reviews and continuous improvement initiatives. Remediation Oversight • Drive remediation activities through to closure, ensuring accountability and timely execution. • Track remediation commitments, milestones, dependencies, and residual risks. • Challenge and escalate overdue actions where required. • Validate completion of agreed mitigation and remediation actions. • Support management reporting on remediation progress and risk reduction outcomes. Key Responsibilities Key Skills & Experience Vulnerability Management • Strong understanding of vulnerability management concepts, CVE, CVSS, exploitability assessment, threat intelligence, and cyber risk management. • Ability to understand vulnerability assessments and translate risk into actionable remediation plans. • Knowledge of vulnerability prioritisation, attack surface exposure, and threat landscape trends. Incident & Crisis Management • Experience coordinating Major Incident, Cyber Incident, or Technology Incident response activities. • Strong understanding of escalation management, crisis communications, and stakeholder coordination. • Experience leading bridge calls, action tracking, executive reporting, and operational response activities Remediation Governance & Oversight • Experience driving remediation activities across multiple technology and infrastructure teams. • Understanding of remediation governance, risk reduction strategies, compensating controls, and risk treatment plans. • Ability to influence stakeholders and drive accountability for remediation outcomes. Skill Requirements Professional Competencies • Strong problem-solving skills with the ability to analyse complex cyber risk scenarios, identify response strategies, and drive issues to resolution. • Excellent communication and stakeholder management skills with the ability to engage technical teams, senior management, and incident stakeholders during high-pressure situations. • Strong analytical capability with experience interpreting and correlating large volumes of vulnerability, threat intelligence, asset inventory, remediation, and operational data to support risk-based decision making. • Ability to translate technical vulnerability information into clear business risk, operational impact, and remediation priorities. • Up-to-date knowledge of vulnerability management practices, emerging threats, vulnerability intelligence, exploit trends, and cyber threat landscape developments. • Self-driven, proactive, and capable of operating independently within a fast-paced 24x7 response environment. • Strong execution focus with the ability to coordinate multiple stakeholders and drive timely remediation outcomes. • Ability to remain calm under pressure and make sound decisions during critical cyber events. • Comfortable working in ambiguous situations and making risk-based decisions with incomplete information. • Highly collaborative with a strong sense of ownership and accountability. Other Requirements Preferred Experience • 5–8 years of experience in Vulnerability Management, Security Operations, Incident Response, Technology Risk, Cyber Defence, or related cyber security disciplines. • Hands-on experience of MS SQL. • Experience supporting 24x7 security operations, on-call rotations, or major incident management activities. • Experience managing critical cyber incidents, zero-day vulnerabilities, and actively exploited threats. • Experience working within a highly regulated environment such as financial services. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube Advertising Cookies These cookies serve ads that are relevant to your inter