Cyber Security Patching & Compliance

Req ID: 391122

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Cyber Security Patching & Compliance to join our team in Pune, Mahārāshtra (IN-MH), India (IN).

Role Purpose

This job description is intended to define the common expectations for resources supporting end-user security, compliance and governance across end-user applications. The role will operate across technology, security, product, application and service teams to strengthen compliance oversight, improve remediation discipline and provide reliable evidence for audit and regulatory requirements.

Role Summary

• Supports end-user security, compliance and governance across workplace devices, operating systems and end-user applications.
• Monitors compliance posture and works with Cyber Security, engineering and service teams to review vulnerabilities and drive remediation.
• Tracks vulnerabilities, unsupported software, end-of-life platforms and non-compliant configurations through to closure.
• Coordinates remediation activity across product owners, application owners, service owners and patch management teams.
• Manages exception governance, ensuring risks are assessed, approved, time-bound and reviewed until closure.
• Provides reliable compliance reporting, audit evidence and control documentation to support technology, risk and regulatory requirements.

Key Responsibilities

• Monitor the end-user compliance posture across devices, operating systems and key end-user applications, working with Cyber Security, engineering and service owners to review vulnerabilities, prioritise risk and initiate remediation activity.
• Track vulnerabilities, unsupported software versions, end-of-life platforms and non-compliant configurations through to closure, ensuring ownership, target dates, risk status and escalation points are clearly recorded.
• Coordinate remediation activities with engineering teams, product owners, application owners, service owners and patch management teams to ensure risks are prioritised, delivery plans are agreed and progress is tracked against defined timelines.
• Manage exception processes and governance reviews, ensuring exceptions are risk-assessed, time-bound, approved by the appropriate owners and reviewed regularly until remediation or formal closure.
• Run patching interlocks with engineering, operations, security and service teams to review deployment progress, blockers, risk acceptance decisions, escalation items and actions required to meet compliance targets.
• Validate compliance reporting, exclusions, and scope definitions.
• Support audit and regulatory evidence requests
• Drive reduction of End User related security risks.

Specific Job Description - Windows Desktop Applications Compliance, security applications compliance & Vulnerability Governance

• Provide governance and oversight for Windows desktop application compliance , core security applications compliance to ensure applications remain supported, secure, compliant, and remediated within defined risk and regulatory requirements.

• Monitor Windows desktop application compliance posture and track vulnerabilities, unsupported versions, and application lifecycle risks.

• Coordinate remediation activities with Engineering, Application Owners, Technology Owners, ITAOs, and Patch Management teams.

• Manage desktop application exception processes and governance reviews, ensuring exceptions are documented, risk-assessed, time-bound, and reviewed through to closure.

• Run patching interlocks to review deployment progress, blockers, remediation ownership, and escalation requirements.

• Validate compliance reporting, exclusions, scope definitions, and dashboard outputs for Windows desktop application compliance.

• Support audit and regulatory evidence requests for individual Windows desktop applications where applicable.

• Produce desktop application compliance dashboards, vulnerability remediation tracking, exception governance records, and audit/control documentation.

Skills and Experience

Key Skills and Experience Experience in end-user technology, cyber security, compliance, service management or technology governance. Strong understanding of vulnerability management, patching governance, Intune and Log analytics workspace understanding and hands-on, data analysis , supported software lifecycle, control evidence and exception management. Ability to work across engineering, operations, application, security, audit and risk stakeholders. Strong analytical skills, with the ability to interpret compliance data, identify trends, challenge data quality and translate findings into clear actions. Excellent communication and stakeholder management skills, with the ability to manage governance forums, track actions and escalate risk effectively.

Key Deliverables

• End User Workplace Applications governance (e.g. Zscaler, Citrix, Adobe, Tanium, DLP, MDE, M365, Edge and Chrome browsers) Compliance Dashboard
• Vulnerability Remediation Tracking
• Exception Governance Records
• Audit Evidence and Control Documentation

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.