• Monitor vendor security bulletins, update announcements, and vulnerability intelligence feeds (e.g., CVE databases, NVD) to identify applicable and critical patches • Conduct regular vulnerability scans of systems to assess current patch levels and identify missing updates • Analyze patch release notes and cybersecurity advisories to assess potential impact and prioritize updates based on vulnerability severity (CVSS scores), exploitability, and business criticality • Coordinate and perform patch testing in controlled staging environments to ensure compatibility and prevent conflicts before production deployment • Develop and implement rollback procedures in case of unexpected issues arising from patch deployment • Plan, schedule, and execute patch deployments during defined maintenance windows to minimize disruption to business operations • Utilize and manage patch management tools (e.g., Microsoft SCCM, WSUS, Ivanti, Ansible, or other enterprise solutions) to deploy updates at scale • Monitor patch deployment status in real-time, identify failed installations, and coordinate remediation activities • Troubleshoot patch-related issues, including installation failures and system reboots, in collaboration with system owners • Ensure all patching activities comply with internal security policies and external regulatory standards (e.g., PCI-DSS, HIPAA, SOC 2)