Vulnerability Remediation Associate

Scotiabank; Puerto Bogotá; On-site; COP 78,120,000 - 122,760,000; Full time

Benefits offered by this job

Competitive benefits

Inclusive work environment

Job summary

ScotiaTech in Bogota, Colombia, is seeking a Vulnerability Remediation Associate to support day-to-day EVM remediation activities within the Cyber Security Operations program. You will review findings, validate asset information, and coordinate with owners to track remediation plans and dates.

You will assist with rescan validation, evidence documentation, and escalation through established channels, while contributing to dashboards, reporting, and ticket reconciliation in Jira and ServiceNow

Qualifications

• Experience in vulnerability management or related cybersecurity operations.
• Ability to document remediation status and manage remediation tracking.
• Experience using Jira and ServiceNow for ticketing and workflow management.
• Ability to coordinate with owners and stakeholders to obtain remediation plans and dates.
• Familiarity with CVEs, CVSS, risk scoring, and remediation concepts.

Responsibilities

• Support day-to-day EVM vulnerability remediation activities under senior guidance.
• Review findings, validate asset/ownership information, and track target dates.
• Communicate with remediation owners and escalate unresolved issues.
• Support operational reporting, dashboards, and ticket reconciliation in Jira/ServiceNow USEM.

Skills

Vulnerability management

Written communication

Attention to detail

Dashboards/Reporting

Education

Post-secondary in cybersecurity/IT

Tools

Jira

ServiceNow

Tenable

Power BI

Microsoft 365

Job description

Select how often (in days) to receive an alert:

Title: Vulnerability Remediation Associate

Requisition ID: 276026
Employee Referral Program – Potential Reward:$200.00
We are committed to investing in our employees and helping you continue your career at ScotiaTech.

Purpose

As part of Scotiabank's Cyber Security Operations (CSOps), the Enterprise Vulnerability Management (EVM) Program supports the identification, prioritization, communication, tracking, escalation, and reporting of vulnerability exposure across the Bank's technology environment. EVM Operations works with application, infrastructure, penetration testing, scanning, and technology teams to drive vulnerabilities through treatment and validation within established remediation expectations.

The remediation function supports recurring vulnerability-management operations across infrastructure, web application security, penetration testing, and priority vulnerability processes. The team uses enterprise vulnerability data, risk scoring, ticketing and ServiceNow workflows, dashboards, and stakeholder communications to maintain visibility of remediation progress and support timely closure.

Accountabilities:

The Vulnerability Remediation Associate is responsible for supporting the day-to-day execution of EVM vulnerability remediation activities. Working under the direction of senior EVM remediation staff, the Associate reviews assigned vulnerability findings, validates key asset and ownership information, communicates with remediation owners, tracks remediation plans and target dates, follows up on outstanding actions, and maintains accurate ticket and status information.

The role supports Zero Tolerance and other prioritized vulnerability workflows by monitoring assigned findings, coordinating acknowledgement and remediation updates, supporting rescan or retest validation, documenting evidence and status, and escalating unresolved issues through the established EVM process. The Associate also supports operational reporting, data-quality follow-up, dashboard and ticket reconciliation, and EVM workflows in Jira and ServiceNow USEM.

Education / Experience/ Other Information

• Experience or foundational knowledge in vulnerability management, cybersecurity operations, technology risk, infrastructure, application security, or a related discipline.
• Ability to review vulnerability findings from infrastructure scanning, web application security, and penetration-testing sources and accurately document remediation status.
• Experience supporting remediation tracking, ticket management, action follow-up, or operational case management using tools such as Jira and ServiceNow.
• Ability to coordinate with application owners, infrastructure teams, security teams, and technology stakeholders to obtain remediation plans, target dates, change references, and evidence.
• Ability to monitor assigned vulnerabilities against remediation targets and raise potential breaches, stalled remediation, missing ownership, or unresolved dependencies through established escalation channels.
• Ability to support validation using scan results, rescans, retests, or other approved remediation evidence and maintain complete closure records.
• Working knowledge of CVEs, severity, CVSS, risk scoring, internet exposure, asset criticality, compensating controls, remediation, exceptions, and false positives.
• Ability to identify data-quality issues involving asset information, application ownership, assignment, vulnerability status, or risk-scoring inputs and document them for follow-up.
• Strong written communication skills for remediation notices, follow-ups, ticket notes, operational summaries, and escalation updates.
• Strong attention to detail when reviewing vulnerability records, ticket fields, status changes, ownership information, and remediation evidence.
• Ability to use dashboards, spreadsheets, ticket queues, and operational reports to reconcile vulnerability and remediation information.
• Working knowledge of Microsoft 365 tools including Excel, Outlook, Teams, Word, and SharePoint.
• Familiarity with Tenable, ServiceNow Vulnerability Response / USEM, Jira, Power BI, or comparable tools is an asset.
• Relevant cybersecurity or technology certifications and post-secondary education in cybersecurity, information technology, computer science, or a related discipline are considered assets

Location(s): Colombia : Bogota : Bogota
ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits.

At ScotiaTech, we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone.We thank all applicants for their interest in a career at ScotiaTech; however, only those candidates who are selected for an interview will be contacted.