Vulnerability Management

Role & responsibilities

Key Responsibilities:

• VM Ops Lead

• Serving as a backup manager to a VM Operations team of six

• Working directly for the IN VM Operations Manager

• Meeting regularly with New Group Entity CISO Manager as well as Technology Teams

• Perform and report on all VM and SBC operations deliverables for new Group Entity

• Maintain new Group Entity VM scan coverage, SBC compliance, console upgrades, control reporting, credential failures, console configuration, scan agents

• Monthly VM reporting and remediation tracking

• SBC

• Perform regular security policy scans across all new group entity technologies

• Analyse scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities.

• Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.

• Work closely with infrastructure and application teams to ensure SBC compliance

• Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.

• Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.

• Participate in audits, compliance checks, and regulatory reporting related to environment security.

• Contribute to the continuous improvement of security scanning processes and tools.

Required Skills:

• Operational and cyber security background

• Small team management background

• Strong communication, delegation, decision making, time management and problem-solving skills

• Basic knowledge of CIS benchmarks for Unix, Windows, Networks, AWS, etc.

• Hands-on experience with vulnerability scanning and compliance tools like Rapid7, Tenable, Qualys, or equivalent.

• Understanding of cloud security principles and virtualization environments.

• Analytical mindset with the ability to interpret scan results and communicate recommendations.

• Strong collaboration and communication skills to work with cross-functional teams.

Preferred Skills

• Experience with automation and scripting (e.g., Python, Bash, PowerShell) to automate scanning tasks.

• Familiarity with any DB scripting language

• Exposure to security in financial institutions or highly regulated industries.