Senior Cyber Security Analyst (Vulnerability Posture Management)

NTT DATA, Inc.; Sydney; Hybrid; AUD 120.000 - 180.000; Vollzeit

Zusammenfassung

NTT DATA, Inc. is seeking a Senior Cyber Security Analyst – Vulnerability Posture Management in Sydney.

You will lead vulnerability management, exposure management and secure configuration efforts across a complex enterprise environment, prioritising risks and driving remediation with stakeholders. The role emphasises hands-on security work, risk-based decision making and collaboration with architecture, infrastructure and security teams to improve compliance and assurance activities.

Qualifikationen

• Experience with enterprise vulnerability management platforms (Tenable, Qualys, Rapid7).
• Ability to lead vulnerability prioritisation and remediation planning.
• Strong knowledge of CIS Benchmarks and security baselines.

Aufgaben

• Conduct vulnerability assessments and security posture reviews across complex environments.
• Configure and run vulnerability scans using Tenable, Qualys or Rapid7.
• Prioritise risks using severity, exposure and business impact.
• Customise CIS Benchmarks to meet organisational requirements.
• Collaborate with infrastructure, application and security teams to remediate vulnerabilities.
• Support audits, compliance and control assurance activities.
• Communicate risk and remediation recommendations to technical and non-technical stakeholders.

Kenntnisse

Vulnerability management

Stakeholder management

Risk prioritisation

Security posture management

Security frameworks

Tools

Tenable

Qualys

Rapid7

Microsoft Defender

Microsoft Sentinel

Jobbeschreibung

Job title: Senior Cyber Security Analyst – Vulnerability Posture Management

Location: Sydney, NSW

Start Date: ASAP

Duration: 12-month contract with high possibility of extension.

Working Flexibility: Hybrid, Full Time

NTT DATA is seeking a Senior Cyber Security Analyst – Vulnerability Posture Management to support vulnerability management, exposure management, secure configuration and security posture capabilities across a complex enterprise environment.

This is a hands‑on cyber security role focused on identifying and prioritising vulnerabilities, driving remediation, improving secure configuration standards and supporting compliance and assurance activities. The successful candidate will combine strong technical expertise across enterprise vulnerability management platforms with the stakeholder skills required to take vulnerabilities from identification through to remediation and risk reduction.

Is innovation part of your DNA? Do you want to enable a connected future for people, organizations, and society?

Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future.

Key Responsibilities

• Conduct vulnerability assessments, security posture reviews and compliance monitoring across complex enterprise environments.
• Configure, run and interpret vulnerability and compliance scans using platforms such as Tenable, Qualys or Rapid7.
• Apply risk‑based vulnerability prioritisation using severity, exploitability, threat intelligence, known exploitation, asset criticality, exposure and business impact.
• Configure and customise CIS Benchmarks, including security checks, exclusions, thresholds and compliance policies to meet organisational requirements.
• Partner with infrastructure, application, architecture and security teams to develop remediation plans, track progress and drive vulnerabilities through to resolution.
• Support secure configuration, system hardening, exposure management, cyber risk assessments, audits and control assurance activities.
• Produce meaningful vulnerability metrics and reporting, clearly communicating technical risk and remediation recommendations to technical and non‑technical stakeholders.

Skills & Experience

• Strong hands‑on experience with enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7 or equivalent.
• Demonstrated vulnerability management experience covering discovery, risk assessment, prioritisation, remediation planning, tracking and risk reduction.
• Strong practical knowledge of CIS Benchmarks, particularly customising benchmarks, checks, exclusions, thresholds and compliance policies beyond standard out‑of‑the‑box configurations.
• Strong understanding of risk‑based vulnerability management, secure configuration, system hardening, security posture management and exposure management.
• Knowledge of security frameworks and standards including Essential Eight, ASD Information Security Manual (ISM), NIST Cybersecurity Framework and CIS Benchmarks.
• Experience supporting cyber security audits, compliance assessments, control assurance, security risk assessment and governance activities.
• Excellent stakeholder management skills with demonstrated capability to influence technology teams, manage competing remediation priorities and translate technical vulnerabilities into business‑relevant risks. Experience with Microsoft Defender, Microsoft Sentinel, attack surface management or exposure management platforms will be highly regarded.

Questions? Reach out: [e-mail]