Position Description

Company Profile:

At CGI, we're a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve. At CGI, we're a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us. Learn more at www.cgi.com.

This is a great opportunity to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development. Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please.

Job Title: Cybersecurity Lead Analyst - Vulnerability, Cyber Risk Governance, Security Operations

Position: Cybersecurity Lead Analyst

Experience: 8-10Yrs

Category: Infrastructure /Cloud

Location: Bangalore

Position ID: J0926-0294

Employment Type: Full-time

Missions

Expert functional knowledge of cyber security or information security processes and expert domain knowledge of any stream or track.
Assist functional manager in performing day to day security activities/operations by working independently and collaboratively with team members.
Responsible to lead one stream, process or track for the function with ability to lead discussions and solve complex problem statements: mentor team members.
Help functional manager in improving processes, mentoring team on technical topics.
Provide regular functional updates of the functional track to the manager.
Ability to prioritize deliverables, work in consultation with manager and help team in meeting deliverables.
Lead various technical initiatives for the team.

Profile

Key Responsibilities

Coordinate end to end vulnerability management activities for applications and supporting technologies
Monitor and track findings from SAST, DAST, penetration testing, Qualys, SonarQube, bug bounty, and other security assessment platforms
Perform risk based prioritization of vulnerabilities and drive remediation actions with application teams
Organize and facilitate vulnerability governance committees, remediation reviews, and executive reporting forums
Challenge and follow up with stakeholders on overdue remediation actions and exception management requests
Produce and maintain vulnerability dashboards, Key Risk Indicators (KRIs), and Key Performance Indicators (KPIs)
Analyze vulnerability trends and recurring root causes to recommend improvement actions
Support audit requests, evidence collection, and compliance reporting activities

Required Skills & Experience

5+ years of experience in Vulnerability Management, Cyber Risk Governance, Application Security, or Security Operations
Strong understanding of vulnerability lifecycle management and remediation governance
Hands on experience with Qualys, SonarQube, SAST, DAST, penetration testing outputs, and vulnerability reporting tools
Good understanding of OWASP Top 10, CVSS scoring, application security risks, and remediation practices
Experience working with application development, infrastructure, and cybersecurity teams in large enterprise environments
Strong stakeholder management and executive communication capabilities
Experience creating management dashboards, metrics, risk reports, and committee materials
Ability to manage multiple priorities while ensuring adherence to security and compliance objectives

Key Deliverables

Vulnerability governance dashboards and remediation tracking reports
Executive reporting packs and cybersecurity committee materials
Monthly KRI/KPI reporting and trend analysis
Tracking and closure of remediation plans and risk treatment actions
Reduction of overdue vulnerabilities and improvement of remediation compliance
Audit, compliance, and management reporting evidence

Business Insight

The Senior Cybersecurity Vulnerability is responsible for driving vulnerability remediation, coordinating cybersecurity risk management activities, and supporting security governance across multiple IT organizations.

Your future duties and responsibilities

Required Qualifications To Be Successful In This Role

Together, as owners, let's turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction.

Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.