Vulnerability Management Expert

We are seeking an experienced Vulnerability Management Expert to join the Data Security Services team supporting enterprise infrastructure and security operations . The successful candidate will be responsible for managing the end-to-end vulnerability management lifecycle, collaborating with cross-functional technology teams, and driving remediation initiatives to strengthen the organization's security posture.

Key Responsibilities

. Manage and co-ordinate the Vulnerability Management lifecycle across enterprise environments.
. Conduct vulnerability assessments and analyze identified security risks.
. Schedule, monitor, and maintain vulnerability scans using enterprise vulnerability management tools.
. Collaborate with infrastructure, network, application, and security teams to drive remediation activities.
. Assess vulnerability severity, business impact, and remediation priorities using a risk-based approach.
. Support asset discovery activities and ensure appropriate onboarding into vulnerability management platforms.
. Maintain vulnerability dashboards, compliance metrics, and management reporting.
. Facilitate risk acceptance processes and document compensating controls where applicable.
. Support penetration testing remediation activities and security improvement initiatives.
. Monitor emerging threats and assess applicability to the organization's environment.
. Prepare periodic operational and management reports.
. Contribute to process improvements and security governance initiatives.
. Work with stakeholders across multiple geographical locations and time zones.

Requirements

. Bachelor's Degree in Information Technology, Computer Science, Cyber Security, Engineering, or a related discipline.
. Minimum 10 years of IT experience, including at least 5 years of experience in Vulnerability Management within enterprise environments.
. Hands-on experience managing Vulnerability Management processes and remediation programs.
. Experience working with vulnerability management platforms such as Tenable Security Center, Nessus, or equivalent solutions.
. Strong understanding of operating systems, networks, databases, applications, and security vulnerabilities.
. Experience conducting vulnerability assessments and coordinating remediation activities.
. Ability to prioritize remediation activities using a risk-based approach.
. Experience working with cross-functional technology teams in large enterprise environments.
. Knowledge of ITIL processes and operational support environments.
. Strong analytical, communication, stakeholder management, and documentation skills.
. Experience within financial services or regulated industries is advantageous.

Preferred Certifications

. Certified Information Systems Security Professional (CISSP)
. GIAC Enterprise Vulnerability Assessor (GEVA) or equivalent
. CREST certification or equivalent industry-recognized certification

Must-Have Skills

1. Vulnerability Management
2. Tenable Security Center / Nessus
3. Vulnerability Assessment & Remediation

EA Number: 11C4879