Exposure Management Analyst- Hybrid (Madrid)

UST; Madrid; Híbrido; EUR 40.000 - 60.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health care plan

Teleworking compensation

Life and accident insurances

Flexible remuneration program

Descripción de la vacante

UST is seeking an Exposure Management Analyst in Madrid, Spain, hybrid role. The candidate will manage security findings, remediation workflows, and compliance activities across complex environments, coordinating with technical and non-technical stakeholders.

English proficiency and eligibility to work in Spain are required. Nice-to-have experience with vulnerability scanning tools (Nexpose), ServiceNow Vulnerability Response, Azure security, and related security certifications.

Formación

• Strong understanding of vulnerability management and exposure management principles.
• Ability to interpret technical security findings and coordinate remediation efforts effectively.
• Experience managing large volumes of work items without losing ownership or oversight.

Responsabilidades

• Manage security findings and remediation activities throughout their entire lifecycle.
• Ensure findings are assigned to owners and tracked until closure.
• Review and approve or reject false-positive requests based on evidence and analysis.
• Analyze vulnerability scan outputs and remediation requirements to determine actions.
• Coordinate remediation efforts with technology teams and system owners.
• Monitor compliance with security baselines and follow up on remediation plans.
• Lead resolution activities for findings affecting multiple teams or units.
• Serve as a key contact for stakeholders requiring support or escalation.
• Ensure documentation and remediation records meet audit requirements.
• Produce operational reporting on remediation performance and risk indicators.
• Escalate critical issues and coordinate with incident response when required.
• Contribute to continuous improvement and onboarding of new processes.

Conocimientos

Vulnerability management

Stakeholder coordination

English proficiency

Analytical skills

Herramientas

Nexpose

ServiceNow Vulnerability Response

ITSM systems

GRC platforms

Descripción del empleo

Role Description

We are looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

What we look for?

We are looking for an Exposure Management Analyst with a solid foundation in IT security, vulnerability management, and stakeholder coordination. The ideal candidate has practical experience managing security findings, remediation processes, and compliance activities within complex technology environments.

Key Attributes Include

• 2-4 years of experience in IT, cybersecurity, vulnerability management, compliance, governance, infrastructure operations, audit support, or security monitoring.


• Understanding of vulnerability scan results, penetration testing findings, and remediation workflows.


• Experience working with ticketing, ITSM, or GRC platforms to track and manage remediation activities.


• Strong organizational, analytical, and decision-making skills.


• Ability to collaborate with technical and non-technical stakeholders and influence remediation efforts.


• Familiarity with security configuration standards, CIS benchmarks, and hardening guidelines.


• Professional proficiency in English.


• Eligibility to work in Spain.


• Curiosity, adaptability, and a willingness to learn new technologies and security domains.

Nice To Have

• Experience with Nexpose or similar vulnerability scanning solutions.


• ServiceNow Vulnerability Response knowledge.


• Azure cloud security experience.


• Security certifications such as CompTIA Security+.

Experience In Financial Services Or Other Regulated Industries.

German language skills.

Main Tasks And Accountabilities Will Be

• Manage security findings and remediation activities throughout their entire lifecycle.


• Ensure all findings are assigned to the appropriate technology or application owners and actively tracked until closure.


• Review and approve or reject false-positive requests based on evidence and technical analysis.


• Analyze vulnerability scan outputs, penetration test reports, and security findings to determine impact and required actions.


• Coordinate remediation efforts with technology teams, security experts, and system owners.


• Monitor compliance with security baselines and follow up on remediation plans.


• Lead resolution activities for findings affecting multiple teams or organizational units.


• Serve as a key contact for stakeholders requiring support, guidance, or escalation assistance.


• Ensure documentation, evidence, and remediation records meet audit and compliance requirements.


• Produce operational reporting on remediation performance, overdue findings, risk indicators, and overall exposure status.


• Escalate critical or stalled issues and coordinate with incident response teams when required.


• Contribute to continuous improvement initiatives and support the onboarding of new exposure management processes and security domains.

What do we expect from you?

• Strong understanding of vulnerability management and exposure management principles.


• Ability to interpret technical security findings and coordinate remediation efforts effectively.


• Experience managing large volumes of work items without losing ownership or oversight.


• Excellent stakeholder management, communication, and collaboration skills.


• Confidence to make informed decisions and challenge unsupported claims when necessary.


• Structured and proactive approach to prioritization, follow-up, and issue resolution.


• Knowledge of security baselines, hardening standards, and compliance requirements.


• Commitment to process quality, audit readiness, and risk reduction.


• Team-oriented mindset with the willingness to learn and grow within a global security environment.


• Ability to work in a fast-paced, highly regulated environment while maintaining attention to detail and accountability.

Work Location

Hybrid position in Madrid (3 days at client´s office, Madrid city center).

Work Schedule

Business hours.

What can we offer?

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!


• Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).


• `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan…)


• Free access to several training platforms


• Professional stability and career plans


• UST also, compensates referrals from which you could benefit when you refer professionals.


• The option to pick between 12 or 14 payments along the year.


• Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)


• UST Club Platform discounts and gym Access discounts

Skills

Vulnerability Management, Security Baselines, Stakeholder Management, ServiceNow