Exposure Management Analyst (Hybrid, Madrid)

UST España & Latam; Madrid; Híbrido; EUR 42.000 - 62.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

23 days annual leave + discretionary 2

Health care plan

Teleworking compensation

Training platforms

Career plans

Referral bonuses

12 or 14 payments per year

WFH/remote work policy

UST Club discounts

Descripción de la vacante

UST España & Latam is seeking an Exposure Management Analyst to join our Madrid team. The role focuses on IT security, vulnerability management, and stakeholder coordination to manage security findings from detection through remediation.

You will work in a hybrid Madrid setting, collaborating with technology teams and non-technical stakeholders to ensure timely remediation and audit-ready documentation. English proficiency is required and Spain work eligibility is a must.

Formación

• 2–4 years of experience in IT, cybersecurity, vulnerability management, governance, or security monitoring.
• Understanding of vulnerability scan results, penetration testing findings, and remediation workflows.
• Experience with ticketing, ITSM, or GRC platforms to track remediation activities.
• Strong organizational, analytical, and decision-making skills.
• Ability to collaborate with technical and non-technical stakeholders and influence remediation efforts.
• Familiarity with security baselines, CIS benchmarks, and hardening guidelines.
• Professional proficiency in English.
• Eligibility to work in Spain.

Responsabilidades

• Manage security findings and remediation activities through their lifecycle.
• Ensure findings are assigned to owners and tracked until closure.
• Review/approve/reject false-positives based on evidence.
• Analyze vulnerability outputs and remediation actions.
• Coordinate remediation with technology teams and system owners.
• Monitor compliance with security baselines and remediation plans.
• Lead resolution for cross-team findings.
• Serve as a key contact for stakeholders needing guidance or escalation.
• Ensure documentation and remediation records meet audit requirements.
• Produce operational reporting on remediation performance and risk indicators.
• Escalate critical or stalled issues and coordinate with incident response teams.
• Contribute to process improvements and onboarding of new security domains.

Conocimientos

Vulnerability management

IT security

Stakeholder coordination

Security findings remediation

Compliance

English proficiency

Work eligibility Spain

Herramientas

Nexpose

ServiceNow Vulnerability Response

Azure security

Descripción del empleo

We are looking for the very Top Talent…and we would be delighted if you were to join our team!

More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

What we look for?

We are looking for an Exposure Management Analyst with a solid foundation in IT security, vulnerability management, and stakeholder coordination. The ideal candidate has practical experience managing security findings, remediation processes, and compliance activities within complex technology environments.

Key attributes include:

• 2-4 years of experience in IT, cybersecurity, vulnerability management, compliance, governance, infrastructure operations, audit support, or security monitoring.
• Understanding of vulnerability scan results, penetration testing findings, and remediation workflows.
• Experience working with ticketing, ITSM, or GRC platforms to track and manage remediation activities.
• Strong organizational, analytical, and decision-making skills.
• Ability to collaborate with technical and non-technical stakeholders and influence remediation efforts.
• Familiarity with security configuration standards, CIS benchmarks, and hardening guidelines.
• Professional proficiency in English.
• Eligibility to work in Spain.
• Curiosity, adaptability, and a willingness to learn new technologies and security domains.

Nice to have:

• Experience with Nexpose or similar vulnerability scanning solutions.
• ServiceNow Vulnerability Response knowledge.
• Azure cloud security experience.
• Security certifications such as CompTIA Security+.
• Experience in financial services or other regulated industries.

Main tasks and accountabilities will be:

• Manage security findings and remediation activities throughout their entire lifecycle.
• Ensure all findings are assigned to the appropriate technology or application owners and actively tracked until closure.
• Review and approve or reject false-positive requests based on evidence and technical analysis.
• Analyze vulnerability scan outputs, penetration test reports, and security findings to determine impact and required actions.
• Coordinate remediation efforts with technology teams, security experts, and system owners.
• Monitor compliance with security baselines and follow up on remediation plans.
• Lead resolution activities for findings affecting multiple teams or organizational units.
• Serve as a key contact for stakeholders requiring support, guidance, or escalation assistance.
• Ensure documentation, evidence, and remediation records meet audit and compliance requirements.
• Produce operational reporting on remediation performance, overdue findings, risk indicators, and overall exposure status.
• Escalate critical or stalled issues and coordinate with incident response teams when required.
• Contribute to continuous improvement initiatives and support the onboarding of new exposure management processes and security domains.

What do we expect from you?

• Strong understanding of vulnerability management and exposure management principles.
• Ability to interpret technical security findings and coordinate remediation efforts effectively.
• Experience managing large volumes of work items without losing ownership or oversight.
• Excellent stakeholder management, communication, and collaboration skills.
• Confidence to make informed decisions and challenge unsupported claims when necessary.
• Structured and proactive approach to prioritization, follow-up, and issue resolution.
• Knowledge of security baselines, hardening standards, and compliance requirements.
• Commitment to process quality, audit readiness, and risk reduction.
• Team-oriented mindset with the willingness to learn and grow within a global security environment.
• Ability to work in a fast-paced, highly regulated environment while maintaining attention to detail and accountability.

Work Location

Hybrid position in Madrid (3 days at client´s office, Madrid city center).

Work Schedule

Business hours.

What can we offer?

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!
• Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).
• Free access to several training platforms
• Professional stability and career plans
• UST also, compensates referrals from which you could benefit when you refer professionals.
• The option to pick between 12 or 14 payments along the year.
• Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime)
• UST Club Platform discounts and gym Access discounts