Vulnerability Analyst

EY; Katowice; On-site; PLN 140,000 - 210,000; Full time

Job summary

EY in Wrocław / Katowice is seeking a Senior Associate to support Vulnerability Health & Hygiene reporting across regions. You will analyze data, review Power BI dashboards, validate data from repositories, and help maintain governance documentation.

The role requires 3+ years in information security, strong communication, and familiarity with risk-based prioritization. Hybrid work setup with some in-office and remote days, collaborating with regional stakeholders.

Qualifications

• 3+ years in information security with vulnerability management exposure.
• Ability to communicate technical issues clearly to stakeholders.
• Experience analyzing data and creating governance artefacts.
• Familiarity with risk-based prioritization and vulnerability remediation.
• Comfort working with regional and cross-country teams.

Responsibilities

• Support data analysis for vulnerability health metrics across regions.
• Review Power BI dashboards and reporting outputs regularly.
• Validate vulnerability data from repositories and tools for accuracy.
• Prepare and maintain reporting documentation and guides.
• Collaborate with Supervising Associates to address data quality issues.

Skills

InfoSec basics

Communication

Team oriented

Problem solving

RBVM experience

AI tools

Tools

Power BI

Job description

Senior Associate – Vulnerability Health & Hygiene Reporting

Location: Wrocław / Katowice – 2 days in office / 3 days remote

The opportunity

As a Senior Associate, you will support Vulnerability Health & Hygiene reporting activities across Super Regions and countries. The role focuses on data analysis, dashboard reviews, GVM data validation, and documentation support to ensure accurate and timely reporting, contributing to EY’s overall security posture.

Your Key Responsibilities

• Support data analysis related to vulnerability health and hygiene metrics across assigned regions.
• Perform regular reviews of Power BI dashboards and reporting outputs.
• Validate vulnerability data sourced from repositories and supporting tools to ensure accuracy and consistency.
• Prepare and maintain reporting documentation, governance artifacts, and procedural guides.
• Collaborate with Supervising Associates and regional stakeholders to address data quality issues and respond to reporting‑related questions.

Skills And Attributes For Success

• Basic understanding of information security and cybersecurity principles.
• Strong communication skills, able to convey technical information clearly.
• Eagerness to learn and build relationships within the organization.
• Team‑orientated, supporting senior team members.
• Proactive problem‑solving with the ability to prioritize tasks.
• RBVM experience and familiarity with risk‑based prioritization approaches.
• Exposure to AI and next‑generation tools for automation and operational efficiency.

To qualify for the role you must have

• 3+ years of experience in an information security role, with exposure to vulnerability management.
• Familiarity with security controls applicability, implementation and threat landscapes.
• Willingness to engage with stakeholders and contribute to a collaborative work environment.
• Basic experience in data analytics and reporting.
• Strong knowledge of identifying and remediating vulnerabilities in an enterprise environment.
• Demonstrated experience assessing and communicating risk to all levels within an organization.
• Fundamental understanding of security control functionality.
• Experience working in a collaborative environment.

Ideally, you’ll also have

• Analytics background.
• Vulnerability management experience.

What We Look For

We seek an experienced, self‑driven analyst who can identify vulnerability trends and associated solutions and convey them to a business audience. The ideal candidate thrives on complex problem sets and continuously learns and seeks ways to strengthen the organization.

What We Offer

We provide a dynamic, globally integrated environment where you can grow your skills and make meaningful impact. Key benefits include:

• Continuous learning and development opportunities.
• Flexible tools and environments to enable impactful work.
• Leadership development and coaching.
• Diverse and inclusive culture supporting personal and professional growth.

In compliance with the requirements of the Whistleblower Protection Act, EY has established a Procedure for reporting breaches of law and undertaking appropriate follow‑up actions. Any misconduct should be reported through the EY Ethics Hotline.