It has been two months now. Every. single. night, they call me. “We have detected a critical vulnerability on your app. please advise immediately”. We keep patching stuff, they keep happening. I used to help at the beginning (even if it's just assigning tasks and ensuring communication), but now I don't answer the phone anymore and they are shaming me and blaming me for it.
Should I quit?
For context: I am a business owner of a cloud app, with really good work conditions. I've been in my role for 2 years and happy about it, even during spikes of work. Recently the company I am working for started to harass me every night with compliance breaches.
The issue isn't that we have to fix some vulnerabilities, but it's always out of business hours since they are coming from a different timezone team.
I can't blame my current provider for those vulnerabilities because it was another provider who developed it. And I am sick to have to ask those poor guys who also have lifes, to work every single night and weekend.
I have tried to:
– Ask the compliance dptm to work with a “same-timezone-team” in the communication and resolution of those issues;
– Create a guidelines of communication that directs them to our first-level of support line;
– Invest my budget (that was needed to deliver our commitments) into anticipation scans/tests in order to identify vulnerabilities before they are raised by this department.
…but unfortunately those were either refused or simply not enough to make any difference in our situation.
I have a call with my hierarchy Monday to discuss this whole problematic. How should I address the issue in your opinion?
Ideally I'd like to keep the job since it's such an unicorn, but I want to make clear I won't answer the phone outside business hours every single day.
I am really lost at this point.