Risk and Compliance - Vulnerability Manager

Location: 2-3 days work from office Minimum Qualifications

• Total of 7 to 10 years in IT technical role with at least 5 years' experience in vulnerability management and compliance monitoring.

Type Of Experience

• Demonstrated experience in cybersecurity vulnerability management and analysis.
• Good understanding of a range of IT technical concepts with focus on cloud computing, networking, systems administration, automation, IT application, and information security best practices
• Knowledge of IT control monitoring for regulatory and compliance requirements like (SOX, PCI DSS, DPA, HIPAA, NERC CIP), Standards (ISO 27001, BS 17799) and frameworks (ITIL, NIST, COBIT).
• Holds experience in delivering Risk and Compliance management services for a client based delivery environment.

Certifications

• Any CISM / CISSP / CISA / ISO 27001 is preferred, along with other technical certification like CCNA, CCNP, CCSA etc.

Areas of Responsibility

• Assist within the responsibility for analyzing the vulnerabilities' data from multiple sources (i.e. external/internal penetration testing, internal/external vulnerability scanning, etc.) across multiple technologies and dynamic surroundings together with infrastructure and applications to determine risk factors.
• Perform reoccurring and on demand scanning activities enterprise environments
• Assist in working with the Business to effectively communicate the risks of identified vulnerabilities and make recommendations regarding the selection of cost-effective security controls to mitigate identified risks
• Provides analysis of vulnerabilities to other team members to assist in support and resolution with overall vulnerability remediation efforts
• Provides analysis and validation post remediation, opportunities for improvements
• Assist in ensuring scan results are presented in appropriate dashboards, reports, and forwarded to other data systems as necessary
• Recommend approaches for addressing vulnerabilities include system patching, deployment of specialized controls, code or infrastructure changes, and changes in development processes
• Execute the vulnerability lifecycle management strategy across the organization
• Assist in interfacing with third-party vendors in improving the vulnerability management process
• Monitor news and intelligence feeds on a daily basis to proactively identify vulnerabilities that may impact the organization
• Continue self-development of knowledge, skills and abilities to better support execution of the Cybersecurity capability

Soft Skills Required

• Good problem solving capability, team player, good communication and documentation skills.
• Handle multiple tasks with different group in a team in a wider domain.
• Ability to prepare Informative Presentation & MIS documentation.
• Ready to work in shifts (24x7 in rotation)
• Should be working as per policies & procedures in compliance with Information Security recommendations.
• Self-driven to take individual initiatives and able to work with minimal guidance