Vulnerability Management Expert

We are seeking an experienced Vulnerability Management Expert to join the Data Security Services team supporting enterprise infrastructure and security operations . The successful candidate will be responsible for managing the end-to-end vulnerability management lifecycle, collaborating with cross-functional technology teams, and driving remediation initiatives to strengthen the organization's security posture.

Key Responsibilities

• Manage and co-ordinate the Vulnerability Management lifecycle across enterprise environments.
• Conduct vulnerability assessments and analyze identified security risks.
• Schedule, monitor, and maintain vulnerability scans using enterprise vulnerability management tools.
• Collaborate with infrastructure, network, application, and security teams to drive remediation activities.
• Assess vulnerability severity, business impact, and remediation priorities using a risk-based approach.
• Support asset discovery activities and ensure appropriate onboarding into vulnerability management platforms.
• Maintain vulnerability dashboards, compliance metrics, and management reporting.
• Facilitate risk acceptance processes and document compensating controls where applicable.
• Support penetration testing remediation activities and security improvement initiatives.
• Monitor emerging threats and assess applicability to the organization's environment.
• Prepare periodic operational and management reports.
• Contribute to process improvements and security governance initiatives.
• Work with stakeholders across multiple geographical locations and time zones.

Requirements

• Bachelor's Degree in Information Technology, Computer Science, Cyber Security, Engineering, or a related discipline.
• Minimum 10 years of IT experience, including at least 5 years of experience in Vulnerability Management within enterprise environments.
• Hands-on experience managing Vulnerability Management processes and remediation programs.
• Experience working with vulnerability management platforms such as Tenable Security Center, Nessus, or equivalent solutions.
• Strong understanding of operating systems, networks, databases, applications, and security vulnerabilities.
• Experience conducting vulnerability assessments and coordinating remediation activities.
• Ability to prioritize remediation activities using a risk-based approach.
• Experience working with cross-functional technology teams in large enterprise environments.
• Knowledge of ITIL processes and operational support environments.
• Strong analytical, communication, stakeholder management, and documentation skills.
• Experience within financial services or regulated industries is advantageous.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• GIAC Enterprise Vulnerability Assessor (GEVA) or equivalent
• CREST certification or equivalent industry-recognized certification

Must-Have Skills

1. Vulnerability Management
2. Tenable Security Center / Nessus
3. Vulnerability Assessment & Remediation

EA Number: 11C4879