Specialist Cybersecurity Vulnerability Management

Overview

The Vulnerability Management Specialist is responsible for independently leading the identification, analysis, validation, and dissemination of vulnerabilities across the enterprise to enable timely remediation and reduce business risk, while working in a fast‑paced and high‑pressure environment. This role provides Tier 3 technical expertise and will take ownership of continuous improvement through the implementation of new technologies, expanded scan coverage, and automation to mature the Vulnerability Management program and stay ahead of evolving cyber threats.

• Independently oversee and coordinate the end‑to‑end vulnerability management lifecycle, including identification, analysis, prioritization, and reporting to key stakeholders and executives.
• Drive risk‑based vulnerability prioritization by integrating asset criticality, threat intelligence, and business context to focus remediation efforts on the highest‑impact exposures across the organization’s external attack surface, IT, and OT/ICS environments.
• Develop and maintain executive‑level dashboards and reporting to communicate vulnerability risk posture, remediation progress, and program KPIs to senior leadership.
• Lead stakeholder meetings across IT and OT/ICS domains to provide recommendations and oversight on remediation strategies aligned with operational and business requirements.
• Extend vulnerability management practices across cloud, hybrid, and containerized environments, ensuring consistent identification and remediation of exposures across the full technology landscape.
• Build, improve, and maintain automation workflows that support vulnerability management operations, while proactively identifying and delivering new automation opportunities to enhance program efficiency, accuracy, and scalability.
• Provide guidance, direction, and oversight to managed service providers and other team members to ensure consistent, high‑quality execution of vulnerability management operations.
• Drive continuous improvement across the department’s technology stack, processes, and standard operating procedures by evaluating configurations, identifying enhancements, and ensuring thorough documentation.
• Leverage AI and advanced analytics to enhance vulnerability identification, prioritization, and remediation workflows, including identifying patterns, reducing false positives, and improving risk‑based decision making.

Include but not limited to:
Grasping, kneeling, light–moderate lifting (objects up to 20 pounds), reaching above shoulder, repetitive motion, typing, sitting, standing, visual requirement (able to see screens, detect colour coding, read fine print), hearing requirement and the ability to sit at a computer for long periods of time. Include but not limited to:
Ability to understand, remember and apply oral and/or written instructions or other information, understand complex problems and collaborate/explore alternative solutions, organise thoughts and ideas into understandable terminology, organise and prioritise work schedule on a short‑term basis, make decisions which have moderate impact on the immediate work unit and monitor impact outside this area, understand and follow basic instructions and guidelines, complete routine forms, compose letters, outlines, memoranda and basic reports and communicate with individuals via telephone.

• Degree/diploma in Information Systems, Information Security, Engineering, or equivalent work experience.
• Minimum 6+ years of directly related work experience.
• Experience with Vulnerability Management technologies (e.g. – Tenable, Qualys, Rapid7).
• Solid understanding of the fundamentals of vulnerability management.
• Experience in security operations, networking, deployment and data analytics.
• Excellent analytical, problem‑solving, technical writing, verbal communication, and interpersonal skills.
• Excellent communication skills with the ability to interact with global teams and facilitate meaningful conversations in a group setting.
• Ability to work with a high level of independence.

• 10 or more years of related experience in IT roles, with a…