Vulnerability Management Analyst Qualys Power User Genpact

🚨 Hiring: Vulnerability Management Analyst – Qualys Power User | Genpact

🏢 Company: Genpact

💼 Position: Vulnerability Management Analyst – Qualys Power User

📍 Location: Any Genpact Location

🧑‍💻 Experience: 5+ Years

🕒 Shift: MST Shift

⚡ Joining: Immediate Joiners Preferred

🛠️ Mandatory Skill: Qualys Power User

💰 Salary: Not Specified

📩 Apply Email: nsenthil.kumar@genpact.com

---

📄 Job Description

Genpact is seeking an experienced Vulnerability Management Analyst – Qualys Power User to support its Threat and Vulnerability Management (TVM) operations. The role focuses on maintaining an accurate, comprehensive, and timely view of the organization's security posture.

The selected candidate will manage day-to-day operations of the Qualys platform, using capabilities such as Vulnerability Management, Detection and Response (VMDR), Cyber Security Asset Management (CSAM), and External Attack Surface Management (EASM) to identify vulnerabilities, discover unmanaged assets, and monitor external exposure.

This is an operational security role. The analyst will not be responsible for patching systems directly. Instead, the role will involve providing reliable vulnerability data to partner teams, creating and managing Jira tickets, collaborating with System Administrators and DevOps teams to prioritize remediation, and validating that identified issues have been resolved.

🎯 Key Responsibilities

• Manage daily vulnerability management operations using the Qualys platform.
• Run vulnerability scans through Qualys VMDR and analyze scan results to identify security weaknesses.
• Discover, reconcile, and maintain asset inventories using Qualys CSAM or similar asset management tools.
• Identify unmanaged assets and coverage gaps that could leave systems exposed to security risks.
• Support External Attack Surface Management (EASM) activities by reviewing DNS records, public IP ranges, and internet-facing assets.
• Identify potentially exposed assets that should not be publicly accessible and support investigation of the associated risks.
• Create, update, and manage vulnerability remediation tickets in Jira.
• Use Jira Query Language (JQL) to search for issues, track remediation progress, and create operational dashboards.
• Collaborate with System Administrators, DevOps teams, and other partner teams to prioritize and resolve vulnerabilities.
• Provide clear, actionable vulnerability information, including affected systems, risk context, and remediation priorities.
• Validate remediation by confirming that vulnerabilities have been resolved or are no longer detected.
• Troubleshoot scanning issues, including scanners being unable to reach hosts and agents appearing offline.
• Correlate external attack surface findings with internal VMDR vulnerabilities to determine actual exposure and risk.
• Apply Windows, Linux, and networking fundamentals to help partner teams understand vulnerability locations and their potential impact.

🎓 Eligibility Criteria

• Experience: Minimum 5 years of relevant professional experience.
• Mandatory Expertise: Strong hands-on operational experience as a Qualys Power User.
• Vulnerability Management: Practical experience with Qualys VMDR, including scan execution and results analysis.
• Asset Management: Experience with Qualys CSAM or similar tools for asset inventory reconciliation and coverage analysis.
• Attack Surface Management: Understanding of EASM, DNS, public IP ranges, and internet-facing assets.
• Ticketing: Strong Jira knowledge, including JQL and dashboard creation.
• Cloud Security: Cloud Security Analyst-level understanding.
• Operating Systems and Networking: Working knowledge of Windows, Linux, and networking fundamentals.
• Collaboration: Ability to build productive relationships with System Administrators, DevOps teams, and other partner teams.
• Shift: Ability to work the specified MST shift.

🛡️ Mandatory Skills

• Qualys Power User
• Qualys VMDR operations and vulnerability scan analysis
• Cloud Security Analyst-level understanding
• Vulnerability identification, prioritization, and remediation tracking
• Strong interpersonal and partner collaboration skills
• Jira ticket management and JQL

🔧 Technical Skills and Tools

1. Qualys and Vulnerability Management

• Qualys VMDR
• Qualys CSAM or equivalent asset management solutions
• Vulnerability scan execution and result analysis
• Asset inventory reconciliation
• Vulnerability validation and remediation tracking

2. External Attack Surface Management

• EASM concepts and external exposure analysis
• DNS and public IP range fundamentals
• Identification of unexpected internet-facing assets
• Correlation of external exposure with internal vulnerabilities

3. Jira and Reporting

• Jira issue and ticket management
• Jira Query Language (JQL)
• Dashboard creation and issue tracking
• Remediation status monitoring and reporting

4. Infrastructure and Cloud Security

• Windows and Linux fundamentals
• Networking fundamentals
• Cloud security concepts
• Scanner connectivity troubleshooting
• Endpoint or scanning agent troubleshooting

Additional Advantage: SIEM experience and strong analytical skills are considered a bonus.

⭐ Job Highlights

• Company: Genpact
• Role: Vulnerability Management Analyst – Qualys Power User
• Experience: 5+ Years
• Location: Any Genpact Location
• Shift: MST Shift
• Joining Preference: Immediate joiners preferred
• Core Focus: Qualys VMDR, CSAM, EASM, Jira, and vulnerability remediation coordination
• Additional Advantage: SIEM experience
• Salary: Not specified

🧠 Interview Preparation Tips

• Prepare practical examples of running Qualys VMDR scans, reviewing findings, and identifying vulnerabilities that require urgent attention.
• Understand how CSAM helps maintain an accurate asset inventory and identify unmanaged or unscanned assets.
• Review EASM fundamentals, including DNS records, public IP ranges, exposed services, and internet-facing asset discovery.
• Practise JQL queries for filtering vulnerability tickets, monitoring issue status, and building Jira dashboards.
• Prepare examples of coordinating with System Administrators and DevOps teams to prioritize vulnerability remediation.
• Understand how to validate remediation and distinguish between a fixed vulnerability, a recurring finding, and a false positive.
• Be ready to troubleshoot common scanner connectivity problems and offline agents.
• Revise Windows, Linux, networking, and cloud security fundamentals relevant to vulnerability analysis.
• Prepare an example of correlating an external attack surface finding with an internal vulnerability to assess actual risk.
• If you have SIEM experience, prepare examples of how security events or logs helped you investigate or prioritize risks.

📩 How to Apply

Interested candidates can share their updated resume with the recruitment team at the email address below.

📧 Email: nsenthil.kumar@genpact.com

Required Email Subject: Qualys – [Your Notice Period]

Include your current notice period in the email, as requested by the recruiter. Mention your relevant Qualys experience, current location, and availability to join.

📩 Apply via Email

---

📌 Job Summary

• Company: Genpact
• Job Title: Vulnerability Management Analyst – Qualys Power User
• Experience: 5+ Years
• Location: Any Genpact Location
• Shift: MST Shift
• Joining: Immediate joiners preferred
• Mandatory Skill: Qualys Power User
• Core Tools: Qualys VMDR, CSAM, EASM, Jira, JQL
• Additional Advantage: SIEM experience
• Salary: Not specified
• Apply Email: nsenthil.kumar@genpact.com

🔗 Related Jobs

• Cybersecurity Jobs
• Information Security Jobs
• Genpact Jobs

💼 Similar Roles

• Vulnerability Management Jobs
• Security Analyst Jobs
• Cloud Security Jobs

📍 Explore More IT Jobs

• IT Jobs
• Remote Jobs
• Experienced Professional Jobs

Data Privacy Consultant Jobs

🚨 Hiring: Data Privacy Consultant | Ahmedabad, Gurugram & Bangalore

💼 Position: Data Privacy Consultant

🏢 Company: Not Specified

📍 Locations: Ahmedabad, Gujarat | Gurugram, Haryana | Bangalore, Karnataka

🧑‍💼 Experience: 3+ Years

💰 Salary: Not Specified

🏭 Industry: Data Privacy / Cybersecurity / Regulatory Compliance

📩 Apply Email: nidhi@firstmileitinc.in

---

📄 Job Description

An exciting opportunity is available for experienced professionals to join as a Data Privacy Consultant, working on data privacy, regulatory compliance, privacy risk management, and cybersecurity-related initiatives.

The role is suited to candidates with hands-on experience in data privacy compliance, regulatory frameworks, privacy risk assessments, and privacy management tools. Successful candidates should understand applicable data protection requirements and help organizations identify privacy risks, assess compliance gaps, and strengthen their data protection practices.

Candidates with exposure to ISO 27001, ISO 27701, and cybersecurity risk management will have an added advantage.

🎯 Key Responsibilities

• Support data privacy compliance initiatives and help assess adherence to applicable regulatory requirements.
• Work with relevant stakeholders on compliance with India's Digital Personal Data Protection (DPDP) Act and other applicable privacy regulations.
• Support privacy compliance activities related to GDPR and HIPAA, as applicable to the organization and engagement.
• Conduct or support Data Protection Impact Assessments (DPIAs) to identify and evaluate privacy risks.
• Maintain and review Records of Processing Activities (ROPA).
• Perform privacy risk assessments and support compliance audits.
• Use privacy management tools such as OneTrust and BigID for privacy-related activities.
• Help identify data protection gaps and recommend appropriate risk mitigation measures.
• Collaborate with cybersecurity, compliance, legal, and business teams on privacy and data protection initiatives.
• Support privacy governance and management system activities where relevant.

Note: These responsibilities are indicative of the advertised role and listed skill requirements; the detailed job description should be confirmed with the recruiter.

🎓 Eligibility Criteria

• Experience: Minimum 3 years of relevant experience.
• Core Expertise: Data privacy compliance, privacy risk assessments, and regulatory frameworks.
• Privacy Regulations: DPDP Act, GDPR, and HIPAA.
• Assessment Frameworks: DPIA, ROPA, privacy risk assessments, and compliance audits.
• Tools: OneTrust and BigID.
• Additional Advantage: Exposure to ISO 27001, ISO 27701, and cybersecurity risk management.
• Work Locations: Ahmedabad, Gurugram, or Bangalore.

Specific educational qualifications, certifications, work arrangement, and salary range have not been provided.

🔐 Key Skills Required

• Data privacy and data protection compliance
• India's Digital Personal Data Protection (DPDP) Act
• General Data Protection Regulation (GDPR)
• Health Insurance Portability and Accountability Act (HIPAA)
• Data Protection Impact Assessment (DPIA)
• Records of Processing Activities (ROPA)
• Privacy risk assessments
• Privacy compliance audits
• OneTrust and BigID privacy management tools
• Cybersecurity and data protection fundamentals
• ISO 27001 and ISO 27701 exposure
• Cybersecurity risk management

⭐ Job Highlights

• Position: Data Privacy Consultant
• Experience: 3+ Years
• Locations: Ahmedabad, Gurugram, and Bangalore
• Functional Areas: Privacy, Compliance, Risk Management, and Cybersecurity
• Key Frameworks: DPDP Act, GDPR, HIPAA, ISO 27001, and ISO 27701
• Privacy Tools: OneTrust and BigID
• Salary: Not specified

🧠 Interview Preparation Tips

• Prepare to explain the key requirements of India's DPDP Act and how organizations can approach compliance.
• Revise major GDPR principles, data subject rights, lawful processing, and privacy governance concepts.
• Understand HIPAA's role in protecting health information and its applicability to relevant organizations.
• Be ready to explain the purpose, process, and documentation involved in a DPIA.
• Prepare examples of creating or maintaining a ROPA and identifying gaps in processing records.
• Discuss your experience conducting privacy risk assessments and supporting compliance audits.
• Review your practical experience with OneTrust or BigID, including the specific modules or workflows you have used.
• Understand how ISO 27001 and ISO 27701 relate to information security and privacy management.
• Prepare examples of how you identified privacy risks, recommended controls, and coordinated with stakeholders.

📩 How to Apply

Interested candidates with 3+ years of relevant experience can share their updated CV with the recruiter using the email address below.

📧 Email: nidhi@firstmileitinc.in

Recommended email subject: Application for Data Privacy Consultant – [Preferred Location]

📩 Apply via Email

---

📌 Job Summary

• Job Title: Data Privacy Consultant
• Company: Not specified
• Experience: 3+ Years
• Locations: Ahmedabad, Gurugram, Bangalore
• Salary: Not specified
• Key Skills: DPDP Act, GDPR, HIPAA, DPIA, ROPA, privacy risk assessments, OneTrust, BigID
• Preferred Additional Exposure: ISO 27001, ISO 27701, cybersecurity risk management
• Apply Email: nidhi@firstmileitinc.in

🔗 Related Jobs

• Data Privacy Jobs
• Cybersecurity Jobs
• Compliance Jobs

💼 Similar Roles

• Information Security Jobs
• Risk Management Jobs
• Governance, Risk and Compliance (GRC) Jobs

📍 Explore More Jobs by Location

• Jobs in Ahmedabad
• Jobs in Gurugram
• Jobs in Bangalore

TPRM - Information Security

🚨 Hiring | TPRM – Information Security | Bangalore | Hybrid

🏢 Company: FutureSoft India

💼 Position: TPRM – Information Security

📍 Location: Bangalore, Karnataka

⏳ Experience: 2–3 Years of Relevant Experience

🏢 Work Mode: Hybrid

⏰ Shift Timings: 11 AM–8 PM or 2 PM–11 PM

🔄 Shift Flexibility: Required

🚀 Joining: Immediate

💰 Budget: Based on Experience

🎓 Education: Bachelor's Degree in Information Security (Mandatory)

---

📄 Job Description

FutureSoft India is looking for a qualified professional for the position of TPRM – Information Security in Bangalore. Candidates with 2–3 years of relevant experience in third-party risk management, information security, and IT risk assessment are encouraged to apply.

The role focuses on evaluating third-party and vendor risks from an information security perspective. The selected candidate will review vendor questionnaires, due diligence documents, SOC reports, and PCI reports to assess compliance with security standards and controls.

The position also requires preparing vendor assessment reports and executive summaries, communicating risk findings clearly, and coordinating with clients and vendors to resolve queries. Candidates must be comfortable working in a hybrid environment and flexible with the specified shift timings.

🛠️ Key Responsibilities

• Third-Party Risk Assessment: Conduct third-party and vendor risk assessments from an information security perspective.
• Vendor Due Diligence: Review vendor questionnaires, security documentation, and due diligence submissions.
• Report Assessment: Review SOC 1, SOC 2, and PCI-related reports and identify relevant security risks and control gaps.
• Security Compliance: Assess vendor compliance with applicable security standards, frameworks, and controls.
• Risk Reporting: Prepare vendor assessment reports and executive summaries that communicate key findings and risks.
• Stakeholder Coordination: Coordinate with clients and vendors to clarify information, resolve queries, and obtain required documentation.
• Risk Communication: Present risk findings clearly and explain their potential business and security implications.
• Assessment Documentation: Maintain clear and accurate records of vendor assessments, findings, and supporting evidence.

🎓 Mandatory Eligibility Criteria

• 2–3 years of relevant professional experience.
• Mandatory: Bachelor's degree in Information Security.
• Knowledge of ISO 27001 and NIST security frameworks.
• Understanding of SOC 1, SOC 2, and PCI report concepts.
• Knowledge of information security, IT risk, and security controls.
• Strong executive summary writing and risk communication skills.
• Good presentation, negotiation, and conflict management abilities.
• Strong verbal and written communication skills.
• Ability to join immediately.
• Flexibility to work either the 11 AM–8 PM or 2 PM–11 PM shift.
• Ability to work in a hybrid setup in Bangalore.

⭐ Mandatory Skills Required

• Third-Party Risk Management (TPRM)
• Information Security and IT Risk
• ISO 27001
• NIST Security Frameworks
• SOC 1 and SOC 2 Concepts
• PCI Report Review
• Vendor Security Assessments
• Security Controls and Compliance Assessment
• Executive Summary Writing
• Risk Storytelling and Presentation
• Negotiation and Conflict Management
• Verbal and Written Communication

Preferred Advantage: Relevant information security or risk management certifications are an added advantage.

🌟 Role Highlights

• Opportunity to work in third-party risk management and information security.
• Hybrid work arrangement in Bangalore.
• Experience requirement of 2–3 years.
• Immediate joiners preferred.
• Flexible shift options: 11 AM–8 PM or 2 PM–11 PM.
• Compensation budget based on experience.
• Relevant certifications provide an added advantage.

🧠 Interview Preparation Tips

• Review the purpose and key requirements of ISO 27001 and NIST security frameworks.
• Understand the differences between SOC 1 and SOC 2 reports and their relevance to vendor risk assessments.
• Revise the basics of PCI-related compliance and security control assessment.
• Prepare to explain how you review vendor questionnaires and identify information security risks.
• Practice writing concise executive summaries that communicate findings, risk impact, and recommended actions.
• Prepare examples of coordinating with vendors or clients to resolve assessment queries.
• Be ready to explain how you communicate technical security risks to non-technical stakeholders.
• Confirm your availability for immediate joining and flexibility across both shift options.

📩 How to Apply

Interested candidates who meet the mandatory educational and technical requirements can share their updated CV with the recruitment team.

📧 Email: VandanaS@futuresoftindia.com

Applicants should mention TPRM – Information Security – Bangalore in the email subject line and highlight their experience in vendor risk assessments, ISO 27001, NIST, SOC reports, and IT risk management.

📩 Apply via Email

---

📌 Job Summary

• Company: FutureSoft India
• Position: TPRM – Information Security
• Location: Bangalore, Karnataka
• Experience: 2–3 Years
• Work Mode: Hybrid
• Shift: 11 AM–8 PM or 2 PM–11 PM; flexibility required
• Joining: Immediate
• Education: Bachelor's degree in Information Security (mandatory)
• Budget: Based on experience
• Application Email: VandanaS@futuresoftindia.com

🔗 Related Jobs

• Information Security Jobs
• Cybersecurity Jobs
• IT Risk Jobs

💼 Similar Roles

• IT Security Jobs
• Risk Management Jobs
• Compliance Jobs

📍 Jobs Nearby

• Jobs in Bangalore
• Jobs in Karnataka
• IT Jobs

IT Auditor GRC

🏢 Company: Not Specified

🚨 Now Hiring – IT Auditor (GRC)

💼 Job Role: IT Auditor – GRC

📍 Location: Mumbai

🎯 Experience: 4–5 Years

💰 CTC: As per industry standards and candidate experience

🎓 Qualification: Bachelor's degree in IT, Computer Science, or a related field

🛡️ Domain: IT Audit, Governance, Risk & Compliance (GRC)

🧑‍💻 Job Type: Not Specified

Information Security & Compliance Officer - Dovetail Capital Private Limited

🚨 Hiring | Information Security & Compliance Officer | Dovetail Capital Private Limited

🏢 Company: Dovetail Capital Private Limited

💼 Position: Information Security & Compliance Officer

📍 Location: Prabhadevi, Mumbai, Maharashtra

⏳ Experience: 5–8 Years

👨‍💼 Reporting To: Chief Technology Officer (CTO)

🏭 Domain: Information Security, GRC, Compliance & Risk Management

🏆 Preferred Certifications: ISO 27001 Lead Auditor / Lead Implementer, CISA, CISM, CEH, Security+

💰 Salary: Not Specified

🏢 Employment Type: Not Specified

---

📄 Job Description

Dovetail Capital Private Limited is looking for an experienced Information Security & Compliance Officer to strengthen its information security, governance, risk management, and compliance framework.

This role is suited to professionals with 5–8 years of experience in information security, Governance, Risk and Compliance (GRC), regulatory compliance, or risk management. The selected candidate will work closely with the CTO, leadership teams, and external auditors to support security governance, risk assessment, compliance monitoring, and continuous improvement of the organization's security posture.

Candidates with relevant certifications such as ISO 27001 Lead Auditor or Lead Implementer, CISA, CISM, CEH, or Security+ are preferred.

🛠️ Key Responsibilities

• Support the development, implementation, and continuous improvement of the information security framework.
• Coordinate governance, risk, and compliance activities across relevant business functions.
• Monitor compliance with applicable policies, security standards, and regulatory requirements.
• Assist with information security risk assessments and track remediation activities.
• Coordinate internal and external security audits and maintain supporting documentation.
• Work with the CTO and leadership team on security initiatives and risk-related matters.
• Support the development, review, and maintenance of information security policies and procedures.
• Track compliance gaps, audit observations, corrective actions, and risk mitigation plans.
• Promote information security awareness and adherence to organizational security practices.
• Help strengthen security governance and maintain ongoing compliance readiness.

🎓 Eligibility Criteria

• 5–8 years of relevant experience in information security, GRC, compliance, or risk management.
• Working knowledge of information security governance and risk management practices.
• Understanding of security policies, compliance frameworks, and audit processes.
• Ability to coordinate with leadership, business teams, and external auditors.
• Strong analytical, documentation, communication, and stakeholder-management skills.
• Relevant professional certifications are preferred.

⭐ Preferred Certifications

• ISO 27001 Lead Auditor: Knowledge of information security management system audits.
• ISO 27001 Lead Implementer: Expertise in implementing and maintaining an information security management system.
• CISA: Certified Information Systems Auditor.
• CISM: Certified Information Security Manager.
• CEH: Certified Ethical Hacker.
• Security+: CompTIA Security+ certification.

🌟 Role Highlights

• Work closely with the CTO and organizational leadership.
• Contribute to information security governance and compliance initiatives.
• Collaborate with external auditors and internal stakeholders.
• Support risk management and continuous improvement of security practices.
• Opportunity to make a meaningful impact on the organization's security posture.

🧠 Interview Preparation Tips

• Revise ISO 27001 requirements, information security management systems, and audit procedures.
• Prepare examples of security risk assessments and risk mitigation initiatives.
• Review GRC processes, compliance monitoring, policy management, and audit evidence preparation.
• Be ready to discuss how you track audit findings and corrective actions through closure.
• Prepare examples of working with senior leadership and external auditors.
• Explain how you prioritize security risks and communicate them to non-technical stakeholders.
• Highlight relevant certifications and practical experience implementing or auditing security controls.

📩 How to Apply

Interested and eligible candidates can share their updated resumes with Dovetail Capital Private Limited's recruitment team.

📧 Email: shraddha.bobade@dovetailindia.com

Applicants should mention the position title and highlight their experience in information security, GRC, compliance, risk management, audits, and relevant certifications.

📩 Apply via Email

---

📌 Job Summary

• Company: Dovetail Capital Private Limited
• Position: Information Security & Compliance Officer
• Location: Prabhadevi, Mumbai, Maharashtra
• Experience: 5–8 Years
• Reporting To: CTO
• Domain: Information Security, GRC, Compliance & Risk Management
• Preferred Certifications: ISO 27001 Lead Auditor / Lead Implementer, CISA, CISM, CEH, Security+
• Application Email: shraddha.bobade@dovetailindia.com

🔗 Related Jobs

• Information Security Jobs
• Cybersecurity Jobs
• Compliance Jobs

💼 Similar Roles

• GRC Jobs
• IT Audit Jobs
• Risk Management Jobs

📍 Jobs Nearby

• Jobs in Mumbai
• Jobs in Maharashtra
• Information Security Jobs

SOC Manager

Hiring: SOC Manager – Cybersecurity

Company: EY India

Location: Navi Mumbai, Maharashtra

Work Mode: Daily Work From Office (WFO)

🚨 HIRING NOW

Position: SOC Manager

Company: EY India

Location: Navi Mumbai, Maharashtra

Experience: 10–13 Years

Minimum Experience: 10 Years in SIEM Solutions / SOC Operations

Work Mode: Daily WFO

Qualification: Not Specified

Salary: Not Specified

Employment Type: Not Specified