Exposure Management Analyst

EPAM Systems Inc; Comunidad de Madrid; Hybrid; EUR 55,000 - 80,000; Full time

Benefits offered by this job

Private health insurance

Stock purchase plan

Paid sick leave

Referral program

Language courses

Job summary

EPAM Systems Inc in Madrid is seeking an Exposure Management Analyst to bridge technical teams and compliance in a hybrid role centered in Madrid's city core. You will own security findings from discovery to remediation and ensure timely closure.

Join a dynamic private banking technology environment where you will coordinate remediation, evidence for audits, and reporting on risk indicators to management.

Qualifications

• Degree in cybersecurity, computer science, IT or equivalent.
• Experience in vulnerability management and security operations.
• Strong analytical skills and ability to interpret security reports.

Responsibilities

• Manage security findings and remediation tasks end to end.
• Assign tasks to technology owners and track ownership changes.
• Evaluate false positives using evidence and findings.
• Coordinate retesting and monitor remediation plans.
• Produce operational reporting on remediation performance and risk indicators.

Skills

Vulnerability management

Security compliance

Penetration testing

InfoSec operations

Security baselines

Technical analysis

Stakeholder management

Documentation

Regulatory standards

English fluency

Education

Cybersecurity/CS/IT degree

Tools

Vulnerability scanners

Security ticketing systems

Operational dashboards

Job description

Security findings in banking do not wait for the right moment to be resolved. The Exposure Management Analyst role in Madrid sits at the intersection of technical teams and compliance, where every finding needs clear ownership and timely closure. The mandate is to keep remediation moving, so nothing stalls and every item is tracked from discovery to resolution. You decide how exposures are managed, escalated and evidenced for audit, shaping our client’s response to evolving risks. The impact of this role is seen in our client’s ability to maintain security standards and respond quickly to new threats.This is a hybrid role based in Madrid's city center, ideal for those eager to thrive in a dynamic environment and make a significant impact in private banking technology. Join EPAM and contribute to shaping the future of financial services in Spain!ResponsibilitiesManage security findings and remediation tasks end to end across penetration test findings, security baseline deviations and infrastructure vulnerabilitiesAssign and route remediation tasks to correct technology owners, adjusting routing rules as ownership changesEvaluate and approve or reject false-positive requests by analyzing technical evidence and vulnerability outputInvestigate technical content within security reports and scan output to determine system impact and coordinate retestingMonitor coverage and deviations against security baselines while following up on remediation plansLead cross-functional remediation efforts for findings spanning multiple organizational boundariesAct as a central point of contact to support solution owners, answer questions, handle escalations and simplify mitigationEnsure process assurance by completing documentation and maintaining audit-ready responses meeting internal policiesProduce operational reporting on remediation performance, risk indicators and progress for technical teams and managementEscalate stalled exposures or missed deadlines and engage cyber incident response colleagues when critical exposures are confirmedRequirementsRelevant degree in cybersecurity, computer science, information technology or a comparable technical disciplinePractical experience in vulnerability management, security compliance, penetration testing or information security operationsSolid understanding of infrastructure vulnerabilities, security baselines and penetration test findings within enterprise environmentsStrong analytical skills with the ability to interpret technical security reports, scan outputs and false-positive claimsEffective communication and stakeholder management skills for coordinating remediation across technical teamsMethodical approach to tracking tasks, maintaining documentation and ensuring compliance with regulatory standardsProactive problem-solving abilities with a willingness to learn, adapt and improve operational processesFluent English language skills with clear written and verbal communication capabilitiesNice to havePrior experience working within banking, financial services or highly regulated corporate environmentsFamiliarity with security exception processes and collaboration with security architecture teamsExperience utilizing automated vulnerability scanners, security ticketing systems and operational reporting dashboardsKnowledge of modern threat landscapes, risk quantification and cybersecurity incident response proceduresWe offerPrivate health insuranceEPAM Employees Stock Purchase Plan100% paid sick leaveReferral ProgramProfessional certificationLanguage coursesEPAM is a leading digital transformation services and product engineering company with 61,700+ EPAMers in 55+ countries and regions. Since 1993, our multidisciplinary teams have been helping make the future real for our clients and communities around the world. In 2018, we opened an office in Spain that quickly grew to over 1,450 EPAMers distributed between the offices in Málaga, Madrid and Cáceres as well as remotely across the country. Here you will collaborate with multinational teams, contribute to numerous innovative projects, and have an opportunity to learn and grow continuously.Why Join EPAMWORK AND LIFE BALANCE. Enjoy more of your personal time with flexible work options, 24 working days of annual leave and paid time off for numerous public holidays.CONTINUOUS LEARNING CULTURE. Craft your personal Career Development Plan to align with your learning objectives. Take advantage of internal training, mentorship, sponsored certifications and LinkedIn courses.CLEAR AND DIFFERENT CAREER PATHS. Grow in engineering or managerial direction to become a People Manager, in-depth technical specialist, Solution Architect, or Project/Delivery Manager.STRONG PROFESSIONAL COMMUNITY. Join a global EPAM community of highly skilled experts and connect with them to solve challenges, exchange ideas, share expertise and make friends.