Vulnerability Remediation Associate

Scotiabank; Bogotá; Hybrid; COP 50,000,000 - 95,000,000; Full time

Job summary

ScotiaTech, a ScotiaGBS unit in Bogota, Colombia, is seeking a Vulnerability Remediation Associate to support day-to-day remediation activities within the CSOps EVM program.

You will review vulnerability findings, coordinate with owners, track plans and dates, and assist with reporting and evidence collection to ensure timely closure.

Qualifications

• Experience in vulnerability management, cybersecurity operations, or related discipline.
• Ability to review vulnerability findings from multiple sources and document remediation status.
• Experience with remediation tracking and ticket management using Jira and ServiceNow.
• Ability to coordinate with owners and teams to obtain remediation plans and evidence.
• Ability to monitor vulnerabilities against targets and escalate when needed.
• Ability to validate remediation using scans and evidence and maintain closure records.
• Working knowledge of CVEs, CVSS, risk scoring, and asset criticality.
• Ability to identify data-quality issues and document follow-up.
• Strong written communication for remediation notices and ticket updates.
• Attention to detail in reviewing records, status changes, and evidence.
• Ability to use dashboards, spreadsheets, and reports to reconcile information.
• Working knowledge of Microsoft 365 tools (Excel, Outlook, Teams, Word, SharePoint).
• Familiarity with Tenable, ServiceNow Vulnerability Response / USEM, Jira, Power BI.

Responsibilities

• The Associate supports day-to-day EVM remediation activities under supervision.
• Reviews findings, validates asset ownership, and tracks remediation plans and dates.
• Communicates with remediation owners and escalates unresolved issues per EVM process.
• Supports operational reporting, data-quality follow-up, and dashboard/ticket reconciliation.

Skills

Vulnerability management

Vulnerability assessment

Vulnerability monitoring

Coordination

Validation

Data quality

Communication

Attention to detail

Data reporting

MS 365

Dashboards

Education

Post-secondary education in cybersecurity/IT/CS

Cybersecurity certifications

Tools

Jira

ServiceNow

Tenable

Power BI

Job description

Select how often (in days) to receive an alert:

Title: Vulnerability Remediation Associate

Requisition ID: 276026

Employee Referral Program – Potential Reward:$200.00

We are committed to investing in our employees and helping you continue your career at ScotiaTech.

Purpose

As part of Scotiabank's Cyber Security Operations (CSOps), the Enterprise Vulnerability Management (EVM) Program supports the identification, prioritization, communication, tracking, escalation, and reporting of vulnerability exposure across the Bank's technology environment. EVM Operations works with application, infrastructure, penetration testing, scanning, and technology teams to drive vulnerabilities through treatment and validation within established remediation expectations.

The remediation function supports recurring vulnerability-management operations across infrastructure, web application security, penetration testing, and priority vulnerability processes. The team uses enterprise vulnerability data, risk scoring, ticketing and ServiceNow workflows, dashboards, and stakeholder communications to maintain visibility of remediation progress and support timely closure.

Accountabilities

The Vulnerability Remediation Associate is responsible for supporting the day-to-day execution of EVM vulnerability remediation activities. Working under the direction of senior EVM remediation staff, the Associate reviews assigned vulnerability findings, validates key asset and ownership information, communicates with remediation owners, tracks remediation plans and target dates, follows up on outstanding actions, and maintains accurate ticket and status information.

The role supports Zero Tolerance and other prioritized vulnerability workflows by monitoring assigned findings, coordinating acknowledgement and remediation updates, supporting rescan or retest validation, documenting evidence and status, and escalating unresolved issues through the established EVM process. The Associate also supports operational reporting, data-quality follow-up, dashboard and ticket reconciliation, and EVM workflows in Jira and ServiceNow USEM.

Education / Experience/ Other Information

• Experience or foundational knowledge in vulnerability management, cybersecurity operations, technology risk, infrastructure, application security, or a related discipline.
• Ability to review vulnerability findings from infrastructure scanning, web application security, and penetration-testing sources and accurately document remediation status.
• Experience supporting remediation tracking, ticket management, action follow-up, or operational case management using tools such as Jira and ServiceNow.
• Ability to coordinate with application owners, infrastructure teams, security teams, and technology stakeholders to obtain remediation plans, target dates, change references, and evidence.
• Ability to monitor assigned vulnerabilities against remediation targets and raise potential breaches, stalled remediation, missing ownership, or unresolved dependencies through established escalation channels.
• Ability to support validation using scan results, rescans, retests, or other approved remediation evidence and maintain complete closure records.
• Working knowledge of CVEs, severity, CVSS, risk scoring, internet exposure, asset criticality, compensating controls, remediation, exceptions, and false positives.
• Ability to identify data-quality issues involving asset information, application ownership, assignment, vulnerability status, or risk-scoring inputs and document them for follow-up.
• Strong written communication skills for remediation notices, follow-ups, ticket notes, operational summaries, and escalation updates.
• Strong attention to detail when reviewing vulnerability records, ticket fields, status changes, ownership information, and remediation evidence.
• Ability to use dashboards, spreadsheets, ticket queues, and operational reports to reconcile vulnerability and remediation information.
• Working knowledge of Microsoft 365 tools including Excel, Outlook, Teams, Word, and SharePoint.
• Familiarity with Tenable, ServiceNow Vulnerability Response / USEM, Jira, Power BI, or comparable tools is an asset.
• Relevant cybersecurity or technology certifications and post-secondary education in cybersecurity, information technology, computer science, or a related discipline are considered assets.

Location(s): Colombia : Bogota : Bogota

ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits.

At ScotiaTech, we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone.

We thank all applicants for their interest in a career at ScotiaTech; however, only those candidates who are selected for an interview will be contacted.