Cyber Security Analyst

Vulnerability Patch Management Analyst

Experience: 5–9 Years

Job Description

We are seeking an experienced Vulnerability Patch Management Analyst to manage the end-to-end vulnerability lifecycle, including identification, risk assessment, prioritization, remediation, and patch deployment across enterprise IT infrastructure, applications, and systems.

The role involves collaborating with IT and cybersecurity teams across the Americas and Head Office, improving vulnerability management processes, tracking remediation SLAs, and delivering risk-based reporting to leadership.

Key Responsibilities

• Manage vulnerability scanning, assessment, prioritization, patching, and remediation.
• Monitor remediation progress, SLA breaches, and Plans of Action and Milestones (POAMs).
• Develop and present KPIs, KRIs, dashboards, and management reports.
• Collaborate with IT, cybersecurity, audit, and risk teams to strengthen security controls.
• Enhance vulnerability management procedures, playbooks, and patch management strategies.
• Support security audits, incident response, and compliance initiatives.
• Leverage AI and scripting to automate manual processes and improve efficiency.

Required Skills

• 5–9 years of experience in vulnerability management, patch management, or cybersecurity.
• Hands-on experience with vulnerability scanning tools and SIEM platforms, including dashboards and reporting.
• Strong knowledge of Windows/Linux, VMware, network architecture, TCP/IP, and security vulnerabilities.
• Proficiency in Power BI, Advanced Excel, Power Query, pivot tables, and data analysis.
• Knowledge of cybersecurity frameworks such as NIST, ISO 27001, CIS, and FFIEC.
• Experience with scripting, process automation, audit remediation, and security documentation.
• Excellent communication, stakeholder management, and reporting skills.
• Willingness to provide off-hours support when required.