Exposure Management Analyst

EPAM Systems Inc; España; Hybrid; EUR 55,000 - 70,000; Full time

Job summary

EPAM Systems Inc in Madrid offers a hybrid role focused on exposure management within private banking technology. You will coordinate remediation across teams, assess findings from tests and reports, and maintain audit-ready documentation to support regulatory compliance.

The role requires a strong background in vulnerability management, security operations and effective cross-functional communication to drive timely closure of exposures and evidence-based responses for audits.

Qualifications

• Degree in cybersecurity, computer science, information technology or similar.
• Experience in vulnerability management, security compliance, penetration testing or security operations.
• Understanding of infrastructure vulnerabilities and security baselines in enterprise environments.
• Strong analytical skills to interpret security reports and scan outputs.
• Excellent communication and stakeholder management across technical teams.
• Proactive, methodical approach to documentation and regulatory compliance.

Responsibilities

• Manage security findings and remediation tasks end to end.
• Assign remediation tasks to technology owners and adjust ownership as needed.
• Evaluate false positives by analyzing evidence and findings.
• Investigate security reports to determine system impact and coordinate retesting.
• Monitor baselines and remediation progress with risk indicators.
• Lead cross-functional remediation efforts across organizational boundaries.
• Support solution owners, handle escalations and assist mitigations.
• Ensure audit-ready documentation and responses per internal policies.
• Produce operational remediation performance and progress reports.

Skills

Vulnerability management

Security compliance

Penetration testing

Information security operations

Analytical skills

Effective communication

Stakeholder management

Documentation

Tracking tasks

Problem-solving

Education

Bachelor's degree in cybersecurity or IT

Tools

Automated vulnerability scanners

Security ticketing systems

Operational reporting dashboards

Job description

Security findings in banking do not wait for the right moment to be resolved. The Exposure Management Analyst role in Madrid sits at the intersection of technical teams and compliance, where every finding needs clear ownership and timely closure. The mandate is to keep remediation moving, so nothing stalls and every item is tracked from discovery to resolution. You decide how exposures are managed, escalated and evidenced for audit, shaping our client’s response to evolving risks. The impact of this role is seen in our client’s ability to maintain security standards and respond quickly to new threats. This is a hybrid role based in Madrid's city center, ideal for those eager to thrive in a dynamic environment and make a significant impact in private banking technology. Join EPAM and contribute to shaping the future of financial services in Spain!

Responsibilities

• Manage security findings and remediation tasks end to end across penetration test findings, security baseline deviations and infrastructure vulnerabilities
• Assign and route remediation tasks to correct technology owners, adjusting routing rules as ownership changes
• Evaluate and approve or reject false-positive requests by analyzing technical evidence and vulnerability output
• Investigate technical content within security reports and scan output to determine system impact and coordinate retesting
• Monitor coverage and deviations against security baselines while following up on remediation plans
• Lead cross-functional remediation efforts for findings spanning multiple organizational boundaries
• Act as a central point of contact to support solution owners, answer questions, handle escalations and simplify mitigation
• Ensure process assurance by completing documentation and maintaining audit-ready responses meeting internal policies
• Produce operational reporting on remediation performance, risk indicators and progress for technical teams and management
• Escalate stalled exposures or missed deadlines and engage cyber incident response colleagues when critical exposures are confirmed

Requirements

• Relevant degree in cybersecurity, computer science, information technology or a comparable technical discipline
• Practical experience in vulnerability management, security compliance, penetration testing or information security operations
• Solid understanding of infrastructure vulnerabilities, security baselines and penetration test findings within enterprise environments
• Strong analytical skills with the ability to interpret technical security reports, scan outputs and false-positive claims
• Effective communication and stakeholder management skills for coordinating remediation across technical teams
• Methodical approach to tracking tasks, maintaining documentation and ensuring compliance with regulatory standards
• Proactive problem-solving abilities with a willingness to learn, adapt and improve operational processes
• Fluent English language skills with clear written and verbal communication capabilities
• Nice to have Prior experience working within banking, financial services or highly regulated corporate environments
• Familiarity with security exception processes and collaboration with security architecture teams
• Experience utilizing automated vulnerability scanners, security ticketing systems and operational reporting dashboards
• Knowledge of modern threat landscapes, risk quantification and cybersecurity incident response procedures