Lead Information Security Analyst - VAPT Management

At

iMerit , we help some of the world's leading AI and technology companies build accurate, reliable, and scalable AI solutions. As our global footprint continues to grow, we're looking for a

Lead Information Security Analyst – VAPT Management

to strengthen our vulnerability management program and help protect our global infrastructure.

What You'll Do ✅ Own the end-to-end lifecycle of internal Vulnerability Assessment & Penetration Testing (VAPT) activities across global locations ✅ Coordinate vulnerability scans, validate findings, prioritize risks, and drive remediation with Infrastructure, Engineering, and IT Operations teams ✅ Track vulnerabilities through closure, conduct verification scans, and maintain audit-ready documentation ✅ Build leadership dashboards, monitor remediation SLAs, and provide insights into security posture and vulnerability trends ✅ Support compliance initiatives across ISO 27001:2022, SOC 2 Type II, TISAX AL3, HIPAA, and GDPR

We're Looking For ✔️ 7+ years of experience in Vulnerability Management, VAPT Coordination, or Information Security Operations ✔️ Experience with vulnerability scanning tools such as OpenVAS/GVM, Nessus, Qualys, or equivalent ✔️ Strong understanding of CVSS scoring, vulnerability remediation, and SLA-driven security operations ✔️ Experience coordinating remediation across multiple teams and global locations ✔️ Excellent communication and stakeholder management skills

Nice to Have • Certifications such as CEH, CompTIA Security+, or equivalent • Experience with GRC platforms, Jira Security, or similar ticketing/tracking tools • Exposure to enterprise security frameworks including ISO 27001, SOC 2, TISAX, HIPAA, or GDPR

Location:

Hyderabad/ Kolkata (with coordination across India, Bhutan, US, and EU teams) If you're looking to make a meaningful impact by driving enterprise-scale vulnerability management and improving the security posture of a global AI organization, we'd love to hear from you.