Vulnerability Management Technical Project Lead

About Sopra Steria

Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.

The world is how we shape it.

Location (Primary) - Noida

GCF Level - 3A

 

Role Description:- The Tech Lead/ServiceLine Lead will be responsible for the operational, organisational, and strategic management of activities related to Vulnerability Management (VM), CTI incidentology, and COD controls. Will act as the primary interface between the Client (CYB, TGITS, Divisions), operational teams, and governance bodies, ensuring service quality, performance, and continuous improvement.

In addition of this governance role, he/she is also responsible for delivering & managing the team. Here is the high-level scope of the responsibilities:

• Monitoring of critical P0 / P1 vulnerabilities
• Steering CTI incidentology
• Execution and governance of COD controls
• Organisation of committees and reporting
• Operational management and team skill development
• Contribution to process, tool, and KPI optimisation

 

Job Description:

• Management of Critical P0 / P1 Vulnerabilities - Promptly responding to P0/P1 vulnerabilities, including identification, assessment, patching, documentation, and development of remediation plans when patching is not possible.
• Governance Specific to P0 Vulnerabilities - Coordinate and oversee P0 vulnerability follow-up meetings, communicate updates and remediation progress, escalate unresolved issues, and ensure compliance with established deadlines.
• Organisation and Facilitation of Committees - To attend, present & track regular meetings and committee sessions with vulnerability status, track remediation efforts, report key performance indicators, and coordinate with divisions on security tools and control enhancements.
• Management of COD Controls - oversees the execution, analysis, and remediation of six COD controls, ensuring effective risk reduction and planning for additional controls to further mitigate cyber threats.
• Team Management and Organisation - Responsible for organising and coordinating the controls and remediation team by planning activities, distributing workloads, managing priorities, ensuring service continuity, and overseeing training, skills development, and leave management.
• Continuous Improvement and Value Creation - Actively contribute to automation initiatives, enhance data reliability, optimize monitoring tools and processes, drive operational efficiency, and support the evolution of services to meet client expectations.
• Key Tools and Environments - Proficiency in ServiceNow SECOPS (certification preferred), vulnerability detection and monitoring tools (Microsoft Defender for Endpoint EDR/XDR, WIZ, NESSUS PRO, Dynatrace), CMDB, VISIT, reporting tools (PowerBI, PowerPoint), and adherence to security standards and Client SLAs is required.

 

Strongly Preferred Certifications

• ServiceNow SECOPS certification
• CISSP / CISM / ISO 27001 certifications
• GIAC (GREM / GCED / GCTI) certifications
• Cloud and Microsoft security certifications

 

Mandatory Soft Skills:

• Proven leadership experience
• Strong people management and client‑facing governance skills
• Executive communication (FR/EN written & verbal reporting
• Crisis management & escalation handling for P0/P1 situations
• Data‑driven decision making using KPIs, dashboards, and trends
• Continuous improvement & automation mindset

 

Total Experience Expected: 08-10 years

Bachelor's degree or Master's in Computer Science, Engineering, or related field.

Advanced degrees or certifications are preferred

 

This roles requires to follow CET working hours/Client business hours

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.