Position Summary :

We are seeking an experienced Scrum Master / POD Lead to lead a dedicated Vulnerability Remediation POD responsible for reducing Critical and High security vulnerabilities across enterprise applications. This role will drive planning, execution, governance, reporting, and stakeholder coordination for vulnerability remediation activities while ensuring compliance with remediation SLAs and minimizing impact on business delivery.

The ideal candidate will have strong Agile delivery experience, a solid understanding of application development lifecycles, security remediation programs, and the ability to coordinate cross-functional teams comprising Developers, QA Engineers, Security Teams, Architects, and Application SMEs.

Key Responsibilities :

POD Leadership & Delivery Management :

- Use AI first model for delivery

- Lead the Vulnerability Remediation POD and drive end-to-end execution of remediation activities.

- Manage intake, prioritization, planning, and tracking of vulnerability remediation work.

- Ensure Critical and High vulnerabilities are remediated within established SLA timelines.

- Facilitate daily stand-ups, sprint planning, backlog refinement, sprint reviews, and retrospectives.

- Coordinate remediation efforts across multiple application portfolios and technology stacks.

Program Governance & Reporting :

- Establish and maintain POD operating rhythms, governance processes, and delivery metrics.

- Track remediation backlog, throughput, aging, SLA compliance, and risk exposure.

- Prepare weekly status reports, dashboards, and executive updates for technology leadership.

- Escalate blockers, dependencies, and capacity constraints to stakeholders as required.

- Drive continuous improvement in remediation processes and operating efficiency.

Stakeholder Management :

- Partner with Security, Application Teams, Product Owners, Architects, QA Leads, and Platform Teams.

- Coordinate cross-team activities required for remediation, testing, deployment, and validation.

- Facilitate prioritization discussions based on vulnerability severity, risk, and business impact.

- Ensure alignment between remediation objectives and business delivery commitments.

Risk & Compliance Management :

- Monitor remediation progress against security compliance requirements and SLAs.

- Ensure proper documentation, audit readiness, and evidence collection for vulnerability closure.

- Proactively identify delivery risks and implement mitigation strategies.

- Support governance reviews and leadership decision-making.

Continuous Improvement :

- Drive adoption of Agile best practices and delivery excellence across the POD.

- Leverage metrics to improve remediation velocity, predictability, and quality.

- Identify opportunities to automate intake, reporting, and remediation workflows.

- Promote adoption of AI-enabled tools to improve team productivity.

Required Skills :

Agile Delivery :

- Scrum Framework

- Agile Project Management

- Kanban

- Backlog Management

- Sprint Planning & Execution

- Dependency Management

- Risk & Issue Management

Security & Technology Awareness :

- Understanding of Application Security Concepts

- Vulnerability Management Lifecycle

- OWASP Fundamentals

- Secure Software Development Lifecycle (SSDLC)

- Understanding of vulnerability scanning tools such as Snyk, SonarQube, Veracode, Checkmarx, etc.

Reporting & Governance :

- Jira

- Confluence

- Azure DevOps (preferred)

- Executive Status Reporting

- KPI and Dashboard Management

- Remediation SLA Tracking

Stakeholder Management :

- Senior Leadership Communication

- Cross-functional Collaboration

- Vendor Coordination

- Facilitation and Negotiation

Required Experience :

- 5+ years of experience in Agile delivery, project management, or Scrum Master roles.

- 2+ years leading cross-functional technology teams.

- Experience managing enterprise application development or modernization programs.

- Experience working with security, compliance, or vulnerability remediation initiatives.

- Proven ability to manage multiple stakeholders and competing priorities.

- Experience in large-scale Agile environments.

Preferred Qualifications :

- Certified Scrum Master (CSM), PSM, or SAFe Scrum Master.

- SAFe Agilist certification preferred.

- Experience in Financial Services, Insurance, or other regulated industries.

- Understanding of software development across Java, .NET, Salesforce, and cloud technologies.

- Experience managing distributed or global delivery teams.

- Knowledge of DORA metrics, operational excellence, and continuous improvement practices.

Key Competencies :

- Strong leadership and organisational skills.

- Excellent communication and stakeholder management.

- Data-driven decision-making and problem-solving.

- Ability to manage ambiguity and drive outcomes.

- Strong risk management and execution focus.

- Customer and business outcome orientation.

Success Measures :

- Critical vulnerabilities remediated within 48-hour SLA.

- High vulnerabilities remediated within 7-day SLA.

- Reduction in overall vulnerability backlog.

- Improved remediation throughput and predictability.

- Accurate and timely leadership reporting.

- Effective coordination across application, security, and QA teams.

- High stakeholder satisfaction and minimal delivery disruption.