Vulnerability Governance Intern (Cybersecurity)

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries. 

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

What you’ll be doing

Functional Responsibilities

1. Managing vulnerability governance for all applications in Global Corporate Systems & Services (EDW).
   • Managing security vulnerability management for all application towers under EDW (ERP, BI, Billing, and HPTools). Remediation and fix deployment on application level should cater to individual application risk assessment.
   • Joins a bi-weekly call with each application tower, discussing respective tower's vulnerability status as overall. Using that meeting platform to address remediation area to prioritize.
   • Generating vulnerability report from Panaseer Vulnerability Management and MARS DB in identifying non-conformance (finding over-due SLA) for remediation prioritization. Bi-weekly sprint data needs to be populated in centralized listing in performing remediation through sprint-by-sprint flow.
   • Identifying and reporting false-positive findings to Threat and Vulnerability. Require evidence acquisition and engagement with relevant team (eg:vendor) in clarification of the issue.
2. Security Risk issue Governance
   • Ensuring risk issues for all towers are being addressed in timely manner and due process with Archer GRC application.
   • Coordinating risk issue remediation completion, ensuring to deliver by due date assigned.
3. Monthly OS patching management for hosts reside under EDW tower ensuring schedule patches deliver as requested.
   • Ensuring monthly OS patching schedule shared to owners for review and updated to the latest and reflecting the current patching time requested by servers and/or application owner.
   • Following up with failed OS patching incident through incident ticket and ensuring that they are addressed by DSG team.
   • Vulnerability fixes associated with OS patching that were not deployed would be addressed in an ad hoc patch schedule. Engagement with server team and maintenance team requires in doing so the deployment of fix would be within the SLA of detected vulnerability.

Internal Relationship Management

• Day-to-day interaction will take place with Release Management, Support and Project teams globally.
• Maintain effective working relationships with other regions peers/teams.
• Working with business partners to understand and develop user stories and appropriate test cases.
• Working with business partners to provide feedback, metrics, and insight regarding test results and released changes.
• Coordinate communications within support and users for corporate system.

Application of Processes, Controls, Standards and Measures

• Ensure consistent delivery controls are met as mandated by Release Management standards.
• Ensure that consistent documentation, processes and procedures are used for all deliveries.
• Adherence to Experian service management documentation and change standards.
• Ensure that audit and information security standards are consistently adhered to and maintained.
• Ensure measurement and metrics are collected, collated, documented, and maintained.
• Adherence to efficient and effective standards for delivery activities and follow department standards for the software development life cycle.

Please state your start and end date in your resume or cover letter. 

• Bachelor's Degree in Computer Science, Software Engineering, Cybersecurity or relevant background.
• Ideally with 6 months internship duration.
• Team players with abilities to work in complex cross-functional and geographically diverse teams.
• Fluent in English.
• Ability to handle demanding work situations with multiple priorities.
• Ability to interface with business users independently.
• Knowledge of a multi-tier architecture, including operating systems, servers, networking, clients, and browsers is a plus.
• Continuous Integration and Delivery knowledge; implementation experience on both topics is a plus.

Our uniqueness is that we truly celebrate yours. Experian's culture and people are key differentiators. We take our people agenda very seriously and focus on what truly matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's strong people first approach is award winning; Great Place To Work™ in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.

Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Experian Careers - Creating a better tomorrow together

Find out what its like to work for Experian by clicking here