Patch Management Lead

JOB DESCRIPTION

Patch Management Lead

JOB TITLE: Patch Management Lead

JOB CODE: PM-LEAD

BAND:

DEPARTMENT: Cybersecurity / Patch Management

LOCATION: Hyderabad, India

FM SITE: N/A

TYPE OF POSITION: Permanent

REPORTING TO: Cybersecurity Manager / Patch Management Manager

Work Hours:

USA business hours /
US client-support shift

JOB SUMMARY

The Patch Management Lead will lead and manage patch management activities across enterprise endpoints and servers, overseeing patch planning, deployment, troubleshooting, compliance tracking, vulnerability remediation, risk management, and reporting. The role will work closely with vulnerability management, endpoint security, infrastructure, IAM, and risk teams using Tanium, Automox, Tenable, Rapid7, TruOps, CrowdStrike, SentinelOne, Okta, CyberArk, and Cyberfusion-related workflows.

The Patch Management Lead will act as the primary escalation point for critical patching issues and vulnerabilities, provide technical guidance to Patch Management Engineers, coordinate patching activities across teams, and ensure patch compliance and remediation targets are achieved within defined SLAs.

OPERATIONAL RESPONSIBILITIES

• Lead and oversee scheduled patching activities using Tanium and support legacy/transition workflows from Automox to Tanium.
• Plan and coordinate monthly, emergency, and out-of-band patch cycles across enterprise endpoints and servers.
• Review patch applicability, deployment status, reboot requirements, failed patches, and compliance results.
• Prioritize patching activities based on vulnerability data from Tenable and Rapid7, including CVE severity, exploitability, and business risk.
• Coordinate with server, desktop, endpoint, application, and infrastructure teams for patch deployment and validation.
• Lead troubleshooting of complex patch installation failures, endpoint communication issues, reboot-pending status, and compliance gaps.
• Track patch tickets, review deployment status, monitor remediation activities, and ensure timely closure of patch-related issues.
• Support and manage patch exception documentation, risk acceptance, and remediation tracking in TruOps or similar platforms.
• Coordinate with endpoint security platforms such as CrowdStrike and SentinelOne when endpoint health or agent status impacts patching.
• Monitor and drive patch compliance, SLA adherence, vulnerability remediation, and deployment success rates.
• Prepare and review patch compliance dashboards, management reports, SLA reports, and audit evidence.
• Lead patch-planning calls and operational reviews with internal teams and stakeholders during USA hours.
• Act as the primary escalation point for high-risk patch failures, critical vulnerabilities, and overdue remediation activities.
• Provide technical guidance and support to Patch Management Engineers and review assigned patching activities.
• Coordinate with vulnerability management, security, infrastructure, IAM, risk, and GRC teams to ensure timely remediation.
• Identify recurring patching issues and drive corrective actions and process improvements.
• Maintain patch management runbooks, deployment procedures, operational documentation, and compliance evidence.

EDUCATIONAL REQUIREMENTS, TOOLS & CERTIFICATIONS

Education: Diploma/bachelors degree in computer science, Information Technology, Cybersecurity, or equivalent experience.

Experience:

• 5–8+ years of experience in patch management, endpoint management, infrastructure operations, vulnerability management, or cybersecurity operations.
• Strong hands-on experience with enterprise patch deployment and vulnerability remediation tools.
• Experience leading or mentoring technical teams in patch management or infrastructure operations.
• Experience supporting US business hours or global operations preferred.

Tools & Technologies:

• Primary Patch Tool: Tanium, Automox
• VM Input Tools: Tenable, Rapid7
• Endpoint Security: CrowdStrike, SentinelOne
• Risk / GRC: TruOps, Cyberfusion
• Identity / PAM: Okta, CyberArk
• Other: ITSM/ticketing tools, Excel, dashboards, reporting platforms

Certifications: ITIL Foundation, Security+, Microsoft endpoint certifications, Tanium certification, or equivalent.

TECHNICAL SKILLS

• Strong understanding of Windows/Linux/macOS patching concepts.
• Strong hands-on knowledge of Tanium and/or Automox patch deployment.
• Strong understanding of vulnerability management, CVEs, CVSS, vulnerability severity, and remediation prioritization.
• Experience working with Tenable and/or Rapid7 for vulnerability-driven remediation.
• Understanding of endpoint security platforms such as CrowdStrike and SentinelOne.
• Strong knowledge of patch compliance, maintenance windows, reboot coordination, and remediation timelines.
• Strong understanding of ITIL processes, including Change Management, Incident Management, Problem Management, and Release Management.
• Ability to analyze complex patch failures and coordinate root-cause and corrective actions.
• Knowledge of patch automation and scripting such as PowerShell or Python is preferred.

SOFT SKILLS

• Strong leadership, communication, and stakeholder management skills.
• Ability to lead and mentor Patch Management Engineers.
• Strong coordination, troubleshooting, and follow-up skills.
• Strong analytical and problem-solving skills.
• Ability to manage multiple priorities and critical remediation activities.
• Strong ownership and accountability for assigned responsibilities.
• Ability to work effectively with global teams while supporting USA business hours.

OTHER SKILLS

• Experience managing enterprise-wide patching programs and remediation activities.
• Knowledge of patch exception handling, risk acceptance, remediation tracking, and SLA monitoring.
• Experience supporting compliance and audit requirements (ISO 27001, NIST, PCI-DSS, SOX).
• Ability to analyze patch compliance trends and identify areas for improvement.
• Strong understanding of patch cycles, maintenance windows, remediation timelines, and reboot coordination.
• Ability to manage high-risk vulnerabilities and coordinate emergency/out-of-band patching activities.
• Strong documentation and reporting skills.
• Ability to prepare and present patch management reports, dashboards, KPIs, and compliance metrics.
• Team-oriented approach with strong ownership of operational activities.
• Ability to maintain operational documentation, runbooks, deployment records, and compliance evidence.
• Strong coordination and stakeholder communication skills while supporting US business hours.
• Ability to act as the primary escalation point for critical patching issues and vulnerability remediation.