Vulnerability Management & Cyber Risk Specialist

Seisma Consulting; City of Melbourne; On-site; AUD 120,000 - 170,000; Full time

Job summary

Seisma Consulting is seeking two experienced Vulnerability Management & Cyber Risk Specialists to join a large-scale banking environment, supporting vulnerability management, cyber security risk and remediation governance.

These roles suit professionals with a strong background in cyber security or technology risk within the banking/financial services sector, who understand vulnerability management from a governance, controls and risk perspective, and who can drive remediation across technology

Qualifications

• Demonstrated experience in Vulnerability Management, Cyber Security Risk, Technology Risk or IT Risk & Controls.
• Experience with vulnerability scanning platforms and interpreting vulnerability data, metrics and reporting.
• Strong stakeholder management skills with the ability to work across Cyber Security, Technology, Risk and Business teams.

Responsibilities

• Define technical requirements for reporting on vulnerability scan coverage, remediation progress and key vulnerability management metrics.
• Support the development and enhancement of vulnerability reporting using data from vulnerability scanning platforms and other technology risk systems.
• Define requirements to automate vulnerability management processes, reporting and controls.
• Partner with Technology, Cyber Security, Risk and Business stakeholders to identify, assess and manage vulnerability-related risks.
• Drive remediation accountability across technology teams and ensure identified vulnerabilities are appropriately managed within agreed risk tolerances.
• Establish and enhance vulnerability management processes, controls, standards and supporting guidance.
• Assess and monitor the effectiveness of vulnerability management controls and processes.
• Identify areas operating outside risk tolerance and work with stakeholders to understand root causes and agree on appropriate improvement and remediation actions.
• Support the organisation in meeting its broader technology and cyber risk management obligations.

Skills

Vulnerability Management

Cyber Security Risk

Technology Risk

IT Risk & Controls

Stakeholder Management

Data Interpretation

Tools

Vulnerability Scanning Platforms

ServiceNow

Job description

Vulnerability Management & Cyber Risk Specialist

Seisma is looking for 2 x experienced Vulnerability Management & Cyber Risk Specialists to join a large-scale banking environment, supporting vulnerability management, cyber security risk and remediation governance.

This role will suit professionals with a strong background in cyber security or technology risk management, particularly within the banking/financial services sector, who understand vulnerability management from a governance, controls and risk perspective.

Key Responsibilities

• Define technical requirements for reporting on vulnerability scan coverage, remediation progress and key vulnerability management metrics.
• Support the development and enhancement of vulnerability reporting using data from vulnerability scanning platforms and other technology risk systems.
• Define requirements to automate vulnerability management processes, reporting and controls.
• Partner with Technology, Cyber Security, Risk and Business stakeholders to identify, assess and manage vulnerability-related risks.
• Drive remediation accountability across technology teams and ensure identified vulnerabilities are appropriately managed within agreed risk tolerances.
• Establish and enhance vulnerability management processes, controls, standards and supporting guidance.
• Assess and monitor the effectiveness of vulnerability management controls and processes.
• Identify areas operating outside risk tolerance and work with stakeholders to understand root causes and agree on appropriate improvement and remediation actions.
• Support the organisation in meeting its broader technology and cyber risk management obligations.

About You

• Demonstrated experience in Vulnerability Management, Cyber Security Risk, Technology Risk or IT Risk & Controls.
• Previous experience working within banking or financial services.
• Strong understanding of vulnerability remediation governance, risk management and security controls.
• Experience working with vulnerability scanning platforms and interpreting vulnerability data, metrics and reporting.
• Strong stakeholder management skills with the ability to work across Cyber Security, Technology, Risk and Business teams.
• Experience defining technical or business requirements for reporting, process improvement or automation.
• Strong analytical skills with the ability to identify control gaps, root causes and remediation actions.
• Excellent written and verbal communication skills.

Highly Desirable

• Experience with ServiceNow, particularly within vulnerability management, technology risk or security workflows.
• Experience supporting the automation of vulnerability management processes.
• Exposure to vulnerability reporting dashboards, remediation metrics and scan coverage reporting.

This is an excellent opportunity to join a complex banking environment and play a key role in strengthening vulnerability management, remediation governance and cyber risk controls.