IT Governance Senior Analyst - Vulnerability Management

Job Title

Key responsibilities include, but are not limited to:

• Update and maintain standard and procedure documentation.
• Solicit and track stakeholder and SME feedback and approvals.
• Present proposals to stakeholders and senior management.
• Track noncompliance and risk treatment and help prepare associated escalations.
• Facilitate whiteboard/collaboration sessions with global representatives to identify and agree upon project outcomes and solve challenges.
• Assist with largescale user migration project.
• Complete any other tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Requirements:

• 5 to 10 years’ relevant experience producing technology-related standards, with Information Security/Cybersecurity experience a plus.
• Strong knowledge of industry standards as they relate to information security management.
• Proven ability to manage conflict, provide leadership, organize, and make decisions.
• Excellent attention to detail and organizational skills.
• Ability to brief technical risks and issues to executives and business leaders.
• Possession of industry certifications highly preferred. Including, but not limited to, Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and Global Information Assurance Certification (GIAC).

Familiarity with one or more of the following:

• Vulnerability Assessment tools, e.g., Nessus, Qualys, etc.
• OSI model
• OS Security, e.g., Unix, Linux, Windows, Cisco, etc.
• Understanding of common protocols, e.g., LDAP, SMTP, DNS, Routing Protocols
• Web application infrastructure, e.g., Application Servers, Web Servers, Databases
• Web development and programming languages i.e., Python, Perl, Ruby, Java, and/or .Net
• Experience solving complex data flow challenges is a plus.

The Governance resource reports to the Vulnerability Operations Head.

The Vulnerability Operations team leads the operational response to the most critical cybersecurity vulnerabilities, known as GEMs, and provides overall Vulnerability Threat Management (VTM) reporting and governance for Client while driving tactical and strategic improvements to current processes.

Within the Vulnerability Operations Team, the Governance resource will help drive improvements to standards and processes that will help reduce risk, improve efficiency, and mitigate vulnerabilities promptly.

This includes collecting stakeholder and SME feedback, evaluating feasibility, presenting to review forums, soliciting approval, and completing administrative process steps to publish the documentation.

The candidate will also help track noncompliance to standards as well as risk-treatment and help prepare associated escalation updates.

The Governance resource will also help drive process improvements and support cross-sector technology improvement projects related to governance tool consolidation, reporting centralization, risk mitigation, and/or user experience.