Vulnerability and Configuration Assessments (VACA)

Job Description –– Vulnerability and Configuration Assessments (VACA) & Software Supply Chain Security

Location - Mumbai

Experience - 5 to 8 Years

Role Overview

The role is responsible for leading and managing the Bank’s enterprise Vulnerability Assessment (VA), Configuration Assessment (CA), Software Bill of Materials (SBOM), and Cybersecurity Bill of Materials (CBOM) programs. The position will primarily focus on governance, operational oversight, remediation tracking, reporting, audit coordination, regulatory compliance, and continuous enhancement of the Bank’s security posture.

The candidate will manage enterprise Vulnerability Management and Configuration Assessment operations using, while also governing SBOM and CBOM processes to strengthen software supply chain security across applications and infrastructure.

Key Responsibilities

Vulnerability Management & Configuration Assessment

•