Vulnerability Management Analyst

In this role, you will lead the vulnerability management program to reduce the firm’s cyber risk. You’ll partner with technology teams to drive remediation, track progress, and provide risk-based guidance. You’ll work with security tooling, threat intel, and dashboards to inform executive decisions. This position offers a chance to influence security posture across a large, global enterprise and evolve vulnerability practices in line with evolving threats.

• Operate as SME for the vulnerability management program
• Perform regular vulnerability scans across applications and infrastructure
• Validate and prioritise remediation from security tooling
• Monitor advisories, threat intelligence, and vendor notifications for remediation
• Develop and maintain vulnerability dashboards, reports, and executive metrics

• Expert experience with enterprise vulnerability management platforms
• Experience with threat intelligence, attack surface mgmt., and exposure mgmt. platforms
• Expert understanding of vulnerability scoring (CWE, CVSS, MITRE ATT&CK)
• Foundational knowledge of Windows, Linux and networking
• Ability to assess security risks and prioritise remediation at enterprise scale
• Experience in creating/remediating vulnerability dashboards and executive metrics
• Ability to validate vulnerabilities with accuracy and reduce false positives
• Experience managing vulnerability exceptions and risk acceptance in a large enterprise
• Strong written and oral communication; ability to convey complex concepts to non-technical audiences
• Proficiency in English; capable of assisting with internal training materials and documentation
• Ability to meet SLAs for remediation
• Understanding vulnerability management within risk management and organizational priorities

• Strong written and oral communication
• Ability to convey complex concepts to non-technical constituents
• Autonomous work style and adaptability
• Enterprise vulnerability management platforms
• Threat intelligence, attack surface management, exposure management platforms
• Vulnerability scoring (CWE, CVSS, MITRE ATT&CK)