I and O Platform Infrastructure Patching and Vulnerability Compliance Lead

EY

7 yrs Thiruvananthapuram Full Time Hybrid (office + remote)
EY logo
Posted : today
Actively hiring

Job description

Advance your career at EY as an authoritative I&O Platform Infrastructure Patching and Vulnerability Compliance Lead. This senior role involves owning and driving patching compliance, vulnerability management, and security posture across EY's global I&O Platform Infrastructure. You will be a key leader within the Infrastructure Operations Centre (IOC), bridging infrastructure operations, cybersecurity, and executive reporting to maintain a secure and compliant global infrastructure estate.

This position offers a unique opportunity to influence the firm's security posture and contribute to a better working world. Join a team focused on innovation and building a career as unique as you are, leveraging global scale and support to become your best self.

Responsibilities

As the I&O Platform Infrastructure Patching and Vulnerability Compliance Lead, you will be responsible for the end-to-end patching governance framework, ensuring vulnerability remediation and accurate compliance reporting. You will chair cross-tower patching forums, manage escalations from security and audit teams, and lead the response to emerging AI-related infrastructure risks. This role involves driving compliance reporting cycles, partnering with various teams, and ensuring a consistent, transparent, and defensible compliance posture across all platform disciplines including Windows, Linux, Storage, HCI, Backup, Network, and Facilities.

Qualifications

We seek a leader with extensive experience in cross-platform patching governance and vulnerability management, ideally with over 7 years in these areas. Essential skills include enterprise-scale patching for Windows and Linux, deep experience with vulnerability scanning tools, and a strong understanding of security frameworks like CIS, NIST, and ISO 27001. Proficiency in scripting for automation (PowerShell/Python) and experience with ITSM platforms such as ServiceNow are crucial. The ideal candidate possesses strong analytical capabilities, executive reporting skills, and the leadership presence to drive accountability across global engineering teams and influence senior stakeholders.

Essential Skills

Windows Server PatchingLinux PatchingStorage Lifecycle ManagementHCI PatchingBackup Platform PatchingNetwork Device PatchingVulnerability ManagementQualysTenableRapid7Microsoft Defender for EndpointAI Risk ResponseSPISLA ManagementExecutive ReportingCIS BenchmarksNIST SP 800-40ISO 27001SOC 2CVSSv3/v4ServiceNowPowerShellPythonDevOpsAgileKanbanSCRUMITIL

Good to Have

ITIL v4 FoundationCISSPCompTIA Security+Microsoft Certified: Security Operations Analyst Associate (SC-200)Qualys Certified SpecialistTenable Certified Security EngineerMicrosoft Defender Vulnerability ManagementAI-Augmented Security ToolingCMDBDCIMEnvironmental Monitoring Systems

Highlights

  • Actively hiring

More Details

RoleI and O Platform Infrastructure Patching and Vulnerability Compliance Lead
IndustryTechnology, Information Services
DepartmentInformation Technology, Security
Employment TypeFull Time, Hybrid (office + remote)

About the Company

EY Global Delivery Services ( EY GDS) logo

EY Global Delivery Services ( EY GDS)

Technology

I and O Platform Infrastructure Patching and Vulnerability Compliance Lead at EY | SkillMX | SkillMX