Vulnerability Management Analyst

The Role

The Vulnerability Management Analyst is a global role within ION’s central services division and will support the Group Security strategy and operational excellence through the identification, mitigation and remediation of information security vulnerabilities, misconfigurations and risks to the business. This role reports to the Vulnerability Management Manager who reports to the Global Head of IT Security.

As a member of the ION Security team, you will build and lead a team of Security professionals specialising in Vulnerability Management along with managing the partners and technology vendor deliverables and of course building and owning the strategy to deliver a world class Vulnerability Management program. The candidate must understand their role in the broader vulnerability management program and your team will regularly perform discovery scanning, risk/exposure assessments, mitigation support activities, continuous validation assessments, and lessons learned workshops and improvement projects to continuously improve our process across Group Security and all other Verticals.

We are looking for a diligent, dedicated, creative and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate with an extensive cybersecurity background, at least 5+ years working in a security role, with focus on Vulnerability Management.

• This role may require work-out of hours in support of 24x7 globally coordinated operation
• The primary responsibilities of this role are to:

• Personnel Management
• Align deliverables and objectives to OKRs
• Be the escalation point for security Tooling issues and critical security breaches

• Protect and defend
  :
• Manage Vulnerability Management tooling to ensure coverage/availability/efficacy
• Drive improvements and feature enhancement to ensure ROI

• Operate and maintain
  :
• Configure, tune, maintain & operate key vulnerability management controls
• Management reporting – real-time metrics and scheduled reports
• Drive process/procedure changes accordingly
• Ensure quality of ticketing & runbook maintenance
• Cultivate and maintain strong vendor relationships
• Have an attitude of continuous improvement
• Participate in CAB, Tool review or Architecture Review Boards (ARBs)

• As a member of the ION IT Security Team, it is expected that the person in this role will:
• Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines
• Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.
• Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents
• Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities
• Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation
• Review vulnerability management systems, configurations, and processes to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results

• Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:
• Security+, CCSP, CEH, GCIH, GMON, CASP, or CISSP
• Minimum of 5 years’ experience in Vulnerability Management within large organizations
• Excellent track record of building a Vulnerability Management program on a global scale with knowledge on vulnerability assessments, remediation and mitigation activities
• Technical Security/Engineering/Compliance background witha previous track record of building risk management framework and applying to an…