E

Ernst & Young

Global professional services: consulting, assurance, tax

Manager – Markets - Multiple Teams

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • Program and project management experience in technology environments, with strong exposure to DevOps and security testing practices.
  • Working knowledge of vulnerability management tools, processes, and remediation workflows, including static application security testing, dynamic application security testing, software composition analysis, and penetration testing.
  • A strong process orientation, attention to detail, and a structured approach to program governance.
  • An analytical mindset and the ability to draw insights from execution metrics and reports to drive action.
  • The ability to learn quickly and build technical fluency across complex technical domains.
  • Comfort with emerging technologies and tools, including the evolving artificial intelligence landscape.
  • Understanding of business principles, software security, and process improvement methodologies.
  • Strong stakeholder management and communication skills to govern outcomes across cross-functional teams.
  • A Bachelor of Technology in Computer Science or a Master of Computer Applications.
  • Six to ten years of experience in software, including four to eight years in technical program management.

Responsibilities

  • Own and manage the vulnerability management program end-to-end, including discovery, triage, prioritization, remediation tracking, and closure across the software asset portfolio.
  • Govern timely remediation of vulnerabilities identified through security testing, including static application security testing, dynamic application security testing, software composition analysis, and penetration testing, in partnership with engineering, DevOps, and security teams.
  • Build and run governance cadences, dashboards, and reporting to track vulnerability aging, service-level agreement adherence, and remediation velocity for leadership and stakeholders.
  • Embed vulnerability management into the software development lifecycle and continuous integration/continuous delivery pipelines in collaboration with DevOps.
  • Analyze execution metrics and reports to identify trends, root causes, and process gaps, and drive corrective action.
  • Define and continuously improve processes, policies, and standards for software asset risk governance.
  • Act as the bridge between technical teams, security, global governance, and leadership, ensuring transparent and timely communication on vulnerability and risk posture.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs