Compliance Reporting & Audit Support

• Generate vulnerability, remediation aging, assessment status and compliance reports.
• Analyze trends, overdue findings, SLA breaches and recurring control deficiencies.
• Maintain vulnerability registers, assessment trackers, dashboards and evidence repositories.
• Support internal and external audits by coordinating and validating technical evidence.
• Track compliance against organizational security policies and applicable control frameworks.
• Recommend improvements to reporting accuracy, evidence quality and audit readiness.

Incident & Service Management (Including Improvement)

• Troubleshoot complex vulnerability management platform and assessment workflow incidents.
• Perform root-cause analysis for recurring scan failures, authentication issues and reporting discrepancies.
• Manage incidents and service requests within defined SLAs using approved ITSM workflows.
• Follow ITIL Incident, Problem, Change and Request Management processes, as applicable.
• Maintain SOPs, runbooks, knowledge articles and shift handover documentation; provide guidance to L1.
• Identify automation opportunities, recurring operational gaps and process improvements; coordinate implementation through approved change procedures.

Required Skills & Qualifications:

• 3–6 years of experience in cloud infrastructure operations, administration and production support across Microsoft Azure and/or AWS environments.
• Hands-on experience with Qualys VMDR or equivalent vulnerability management tools.
• Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation.
• Experience with security assessments, technical evidence reviews and control gap identification.
• Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments.
• Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management.
• Strong troubleshooting, analytical, documentation and stakeholder coordination skills.
• Global 24x7x365 support across APAC, EMEA and NLAM, with rotational shifts and follow-the-sun handovers.

Preferred Skills & Qualifications:

• Qualys certification or exposure to Qualys Policy Compliance and related modules.
• Knowledge of ISO 27001, SOC 2, CIS Benchmarks or other security frameworks.
• Exposure to GRC platforms, audit management and risk exception workflows.
• Basic scripting skills in PowerShell, Python or Shell.
• Experience with security dashboards, automation and operational process improvement.
• Security+, ITIL or relevant information security certifications.

Key Competencies

Qualys VMDR | Vulnerability Analysis | Security Assessments | Evidence Validation | Remediation Tracking | Rescan Validation | Compliance Reporting | Root-Cause Analysis | ITSM | SLA Management | Continuous Improvement | Global 24x7 Operations

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.