Lead Information Security Analyst - VAPT Management

At iMerit, we help some of the world's leading AI and technology companies build accurate, reliable, and scalable AI solutions. As our global footprint continues to grow, we're looking for a Lead Information Security Analyst – VAPT Management to strengthen our vulnerability management program and help protect our global infrastructure.

What You'll Do

Own the end-to-end lifecycle of internal Vulnerability Assessment & Penetration Testing (VAPT) activities across global locations

Coordinate vulnerability scans, validate findings, prioritize risks, and drive remediation with Infrastructure, Engineering, and IT Operations teams

Track vulnerabilities through closure, conduct verification scans, and maintain audit-ready documentation

Build leadership dashboards, monitor remediation SLAs, and provide insights into security posture and vulnerability trends

Support compliance initiatives across ISO 27001:2022, SOC 2 Type II, TISAX AL3, HIPAA, and GDPR

We're Looking For

7+ years of experience in Vulnerability Management, VAPT Coordination, or Information Security Operations

Experience with vulnerability scanning tools such as OpenVAS/GVM, Nessus, Qualys, or equivalent

Strong understanding of CVSS scoring, vulnerability remediation, and SLA-driven security operations

Experience coordinating remediation across multiple teams and global locations

Excellent communication and stakeholder management skills

Nice to Have

• Certifications such as CEH, CompTIA Security+, or equivalent

• Experience with GRC platforms, Jira Security, or similar ticketing/tracking tools

• Exposure to enterprise security frameworks including ISO 27001, SOC 2, TISAX, HIPAA, or GDPR

Location: Hyderabad/ Kolkata (with coordination across India, Bhutan, US, and EU teams)

If you're looking to make a meaningful impact by driving enterprise-scale vulnerability management and improving the security posture of a global AI organization, we'd love to hear from you.