Vulnerability Governance & Reporting Analyst

Vulnerability Governance & Reporting Analyst

The Vulnerability Governance & Reporting Analyst is responsible for strengthening enterprise governance to reduce the backlog of vulnerabilities and misconfigurations while enabling scalable, data-driven capabilities that support AI readiness across the organization. This role serves as a critical bridge between vulnerability management operations, governance, and emerging AI initiatives. The position focuses on establishing robust governance frameworks, improving data quality, and driving accountability across remediation processes to ensure vulnerabilities and configuration gaps are addressed in a timely and risk-informed manner. The role also ensures that vulnerability and configuration data is structured, normalized, and actionable, forming a reliable foundation for AI-driven insights, automation, and advanced analytics. This individual partners closely with Cybersecurity, Infrastructure, Cloud, and Data teams to optimize workflows, enforce SLA adherence, and enhance reporting transparency. The role is instrumental in transitioning the VMCA program from reactive backlog management to a proactive, intelligence-driven, and AI-enabled capability.

Skills:

• Technical Skills
• Vulnerability & Configuration Platforms: Strong experience with Qualys, Wiz, and similar platforms, including data validation and workflow integration
• Governance & Risk Management: Deep understanding of vulnerability lifecycle governance, SLA management, and risk acceptance processes
• Data & AI Enablement: Experience preparing and structuring datasets for analytics and AI use cases. Familiarity with data normalization, enrichment, and aggregation across security tools
• Automation & Integration: Proficiency with automation (e.g., PowerShell, Python) and integration with platforms such as ServiceNow, JupiterOne, CMDB, and data pipelines
• Analytics & Reporting: Experience building dashboards and executive reporting (e.g., Tableau) focused on risk reduction, backlog trends, and SLA performance
• Core Strengths
• Governance Leadership: Ability to establish and enforce structured governance models that drive accountability and measurable outcomes
• Strategic Thinking & AI Alignment: Forward-looking mindset focused on enabling AI-driven capabilities through strong data and process foundations
• Operational Execution & Backlog Reduction: Proven ability to reduce large-scale vulnerability backlogs through prioritization, process improvement, and stakeholder alignment
• Data-Driven Decision Making: Strong analytical mindset with the ability to translate complex data into actionable insights and measurable outcomes
• Executive Communication: Ability to communicate risk, progress, and strategy in a clear, concise, and leadership-ready format
• Cross-Functional Influence: Skilled at driving alignment across teams with competing priorities to achieve enterprise risk reduction goals

Keywords: Education: BCH Skills and Experience: Required Skills: VULNERABILITY LIFECYCLE GOVERNANCE SLA MANAGEMENT RISK ACCEPTANCE PROCESSES QUALYS WIZ Additional Skills: DATA VALIDATION WORKFLOW INTEGRATION PREPARING DATASETS FOR ANALYTICS STRUCTURING DATASETS FOR AI USE CASES DATA NORMALIZATION DATA ENRICHMENT DATA AGGREGATION ACROSS SECURITY TOOLS AUTOMATION POWERSHELL PYTHON INTEGRATION WITH SERVICENOW INTEGRATION WITH JUPITERONE INTEGRATION WITH CMDB INTEGRATION WITH DATA PIPELINES BUILDING DASHBOARDS EXECUTIVE REPORTING TABLEAU RISK REDUCTION REPORTING BACKLOG TREND REPORTING SLA PERFORMANCE REPORTING GOVERNANCE LEADERSHIP OPERATIONAL EXECUTION BACKLOG REDUCTION DATA-DRIVEN DECISION MAKING EXECUTIVE COMMUNICATION CROSS-FUNCTIONAL INFLUENCE EEO: "Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."