Senior Analyst - Vulnerability Management

• Manage complex information systems to understand and prioritize actions on Cyber Security risks, audit requirements and data value, and provide guidance to vulnerability management team members

• Flexible to work in 24/7 support

   

• Drive prioritization of  vulnerabilities through a group SVM standards approach, to meet common organizational objectives such as regulatory compliance and audit functions
• Manage and Lead Crisis for super critical and zero-day vulnerabilities, from invoking the crisis till the closure and regular updates to management, BISO and CIOs of the group
• Manage the triage of vulnerabilities, ensuring mitigation measures are implemented, follow -up till its closure
• strategies and provide advice on complex configuration changes in support of vulnerability remediation
• Proactively identify and leverage threat intelligence sources to inform strategic vulnerability mitigation measures

·       Minimum 5+ experience with Hands on any detection tool like Tenable, Nessus, Qualys etc..

·       Vulnerability Management processes and standards

·       Exploitation concepts

·       Knowledge of vulnerability management frameworks and concepts such as CVE, and CVSS scoring systems and EPSS

·       Automation Skills – For quick reporting, PowerBI, Python Scripting etc

·       Hands on experience on Vulnerability Management, Policy Compliance, Web Application Scanning, Cloud Agent, Asset View

• Excellent verbal and written communication skills to effectively report findings and collaborate with cross-functional teams.

Strong academic background with technology skills

Innovative and challenging mindset.

Ability to present complex solutions and methods to a general community

Independent thinking, willingness to “Step outside the box” and take reasonable, calculated risks

Analytical and problem-solving skills, as well as excellent judgement and self-motivation

IT Security Certification such as Certified Vulnerability Assessor (CVA), Detection Tool like Nessus, Tenable, Qualys Modules (Containers, Compliance)