Associate Consultant - Technology Infrastructure Compliance

Skip to main content.

View More Jobs

Associate Consultant - Technology Infrastructure Compliance

Trending

Apply Now

Job Info

• Job Identification15988
• Posting Date06/24/2026, 03:15 AM
• Job RoleIT Infrastructure-IT Infrastructure
• Experience (In Years)6-9

Job Description

Infrastructure Engineer responsible for end-to-end vulnerability management across business solutions infrastructure, ensuring accurate asset inventory (CMDB), proper reporting, vulnerability assignment, timely remediation, and measurable risk reduction

Responsibilities

• Vulnerability Management Operations

• - Own lifecycle of vulnerabilities from detection through remediation and validation

• - Analyze vulnerability scan outputs and prioritize remediation

• - Ensure vulnerabilities are assigned and tracked to closure

• - Drive SLA adherence across severity levels

• - Coordinate remediation with InfraSec and asset owners

• - enhance and improve current process

• - work with application owners to help them remediate application related vulnerabilities

• CMDB & Asset Inventory Management

• - Maintain accurate CMDB and asset inventory (servers, cloud, application ownership)``

• - Validate scan coverage against CMDB and identify gaps

• - Improve asset-to-owner mapping for accountability

• Remediation Tracking & Coordination

• - Drive weekly/monthly remediation tracking cycles

• - Coordinate between application owners, infra teams, and security

• - Escalate overdue vulnerabilities and track progress

• Ticketing & Workflow Management

• - Create and manage remediation tickets (ServiceNow/Jira)

• - Ensure proper categorization, SLA tracking, and audit trail

• - Automate routing and assignment where possible

• Rescanning & Validation

• - Execute post-remediation rescans to validate closure

• - Track false positives and exceptions with approvals

• - Maintain audit-ready evidence

• Reporting & Metrics

• - Produce dashboards: open vulnerabilities, SLA compliance, MTTR, aged findings

• - Publish executive summaries and operational reports

• - Identify trends and systemic issues

• Process & Automation Improvement

• - Identify opportunities to automate remediation workflows

• - Support patch automation and standardized remediation patterns

Qualifications

Qualifications

• - 3-5+ years experience in vulnerability management or infrastructure engineering

• - Experience with tools like Qualys,

• - Strong understanding of OS patching, cloud infrastructure, and application vulnerabilities

• - Experience with CMDB systems and ticketing tools (ServiceNow/Jira)

• - Knowledge of CVE, CVSS scoring and prioritization

• Nice to Have

• - Scripting (Python, PowerShell)

• - SOAR/automation tools

• - Familiarity with compliance frameworks (HITRUST, NIST, SOC2)

• Key Success Metrics

• - SLA compliance for remediation

• - Reduction in aged vulnerabilities

• - CMDB accuracy

• - MTTR improvement

Required Skills

• Adapting To Change
• Attention To Consistency
• Configuration Management Documentation
• Hardware Support
• Interpersonal Dynamics with Coworkers
• Results Orientation
• Software Licensing
• Time Management Skills
• Working under Pressure
• Writing Communication Skills

About Us

EXL (NASDAQ: EXLS) is a leading data analytics and digital operations and solutions company. We partner with clients using a data and AI-led approach to reinvent business models, drive better business outcomes and unlock growth with speed. EXL harnesses the power of data, analytics, AI, and deep industry knowledge to transform operations for the world’s leading corporations in industries including insurance, healthcare, banking and financial services, media and retail, among others. EXL was founded in 1999 with the core values of innovation, collaboration, excellence, integrity and respect. We are headquartered in New York and have more than 54,000 employees spanning six continents. For more information, visit www.exlservice.com.

EXL never requires or asks for fees/payments or credit card or bank details during any phase of the recruitment or hiring process and has not authorized any agencies or partners to collect any fee or payment from prospective candidates. EXL will only extend a job offer after a candidate has gone through a formal interview process with members of EXL’s Human Resources team, as well as our hiring managers.

Similar Jobs

• Home
• About Us
• Investors Relations

I am an employee

IMP NoticeLearn more

ACCEPT COOKIESDECLINE OPTIONAL COOKIES

Are You Still With Us?

It seems you've been gone for a while. For security reasons we will end your session automatically in 03:00 unless you would like to continue working.

End SessionContinue Working

Work Summary

This summary is generated by AI Assist. Click inside the summary text box to make changes as necessary.

DiscardAdd Summary

Page Associate Consultant - Technology Infrastructure Compliance - EXL Talent Acquisition Team Careers loaded