IT Security Senior Analyst – Vulnerability Management

Socium - Teams Done Differently; Makati; Sur place; PHP 1 200 000 - 2 000 000; Plein temps

Résumé du poste

Socium - Teams Done Differently is seeking an IT Security Senior Analyst to lead vulnerability and exposure management for critical IT assets. The role drives risk assessments, threat modeling, and the continuous improvement of vulnerability management processes, guidelines, and procedures.

The ideal candidate has a strong IT security background, extensive experience in vulnerability management, and the ability to communicate findings clearly to application owners and leadership.

Qualifications

• Graduate degree in Computer Engineering, Computer Science, Electronics and Communications Engineering, or related field.

Responsabilités

• Perform vulnerability and risk assessments of IT systems prior to production deployment and in production.
• Identify, manage, and prioritize security threats and exposures affecting systems and infrastructure.
• Assess vulnerabilities and misconfigurations and recommend compensating controls.
• Prepare periodic reports and communicate findings to application owners for remediation.
• Monitor emerging cybersecurity threats and industry updates.
• Produce security metrics and reports on operations and compliance.
• Provide guidance to IT Security Analysts on compensating controls and remediation.
• Conduct root-cause analysis and recommend corrective actions.
• Regularly assess security tools and processes to improve efficiency.
• Define and refine security standards, policies, and procedures.
• Manage cybersecurity projects assigned by security leadership.

Description du poste

IT Security Senior Analyst – Vulnerability Management

Job Overview

The IT Security Senior Analyst will be responsible for performing security risk assessments, threat modeling, and vulnerability and exposure management for critical IT assets. The role will also support the continuous development and optimization of vulnerability management processes, guidelines, and procedures.

Key Responsibilities

• Perform vulnerability and risk assessments of IT systems prior to production deployment and for systems already operating in production.
• Identify, manage, and prioritize security threats and exposures affecting systems and infrastructure.
• Assess vulnerabilities, exposures, and security misconfigurations and recommend appropriate compensating controls.
• Prepare periodic reports and communicate findings to application owners to support timely remediation.
• Monitor emerging cybersecurity threats, security trends, vendor advisories, and relevant industry updates.
• Produce security operations, compliance, and operational metrics and reports.
• Provide guidance to IT Security Analysts in identifying compensating controls and addressing detected system vulnerabilities.
• Conduct root-cause analysis and recommend corrective actions to prevent recurrence.
• Regularly assess existing security tools and processes to improve efficiency and effectiveness.
• Define and refine security standards, rules, policies, and procedures to maximize existing security capabilities.
• Manage and implement cybersecurity projects and initiatives assigned by security leadership.

Qualifications

• Graduate of Computer Engineering, Computer Science, Electronics and Communications Engineering, or a related field.
• At least 10 years of relevant IT experience.
• Strong background in IT Security.
• CISSP and/or CISM certification is an advantage but not mandatory.

Key Skills

• Vulnerability Management
• Security Risk Assessment
• Security Operations
• Security Architecture
• Threat Modeling
• Threat & Exposure Management
• Vulnerability Remediation
• Compensating Controls
• Security Compliance & Reporting
• Strong analytical and technical capabilities
• Strong written and verbal communication skills
• Self-driven and able to work independently