Cybersecurity Vulnerability Management Analyst

act digital; Lisboa; On-site; EUR 40,000 - 70,000; Full time

Job summary

act digital is seeking a Cybersecurity Vulnerability Management Analyst to join the Assurance & Trust Team, protecting a large international organization from evolving threats.

You will monitor internet-facing assets, identify and prioritize vulnerabilities, drive remediation with IT and business teams, and produce executive-level security metrics to support risk decisions. Collaboration across countries will be essential.

Qualifications

• Strong understanding of vulnerability management, risk management and governance.
• Ability to assess cyber risks affecting business and IT environments.
• Knowledge of external attack surface management and offensive security concepts.

Responsibilities

• Monitor and analyze the security posture of internet-facing assets.
• Identify, prioritize and remediate vulnerabilities with technical and business teams.
• Produce security metrics and executive-level reporting for risk decisions.
• Support continuous improvement of vulnerability management capabilities.
• Contribute to security governance activities and platform optimization.

Skills

Vulnerability Management

Cybersecurity Risk Management

Security Governance

IT Risk

Vulnerability Assessment

Security Testing Methodologies

Ethical Hacking Principles

English proficiency

Tools

Microsoft Excel

Power BI

SQL

Job description

Cybersecurity Vulnerability Management Analyst to join the Cybersecurity & Digital Fraud Department, contributing to the protection of a large international organization operating in a highly regulated and constantly evolving threat landscape.

You will be part of the Assurance & Trust Team, responsible for strengthening cybersecurity assurance, monitoring the organization's external security posture, and helping ensure that internet-facing assets remain protected against emerging threats.

This role offers a unique opportunity to work at the intersection of Cybersecurity, IT Risk Management, Vulnerability Assessment, External Attack Surface Monitoring, and Security Governance, while interacting with security experts and stakeholders across multiple countries and business entities.

As a Cybersecurity Vulnerability Management Analyst, you will:

• Monitor and assess the security posture of internet-facing assets.
• Identify, analyze, and prioritize vulnerabilities and cyber risks.
• Drive remediation activities with technical and business teams.
• Produce meaningful security metrics and executive-level reporting.
• Contribute to improving the organization's vulnerability management capabilities.
• Support the continuous enhancement of cyber resilience and operational security.

Vulnerability Management

• Perform vulnerability assessments on externally exposed assets.
• Monitor and analyze security risks impacting internet-facing systems.
• Support vulnerability identification, classification, prioritization, and remediation activities.
• Follow up with stakeholders to ensure vulnerabilities are addressed within defined timelines.
• Track remediation progress and risk exposure across entities.

Attack Surface Management & Security Ratings

• Contribute to the management of external security ratings.
• Monitor the organization's external attack surface.
• Analyze security posture trends and identify exposure risks.
• Support initiatives aimed at improving security scores and cyber maturity.
• Provide recommendations to reduce risk and strengthen external security visibility.

Security Reporting & Governance

• Produce vulnerability reports and dashboards for cybersecurity leadership.
• Present findings and risk exposure information to senior stakeholders.
• Develop metrics and reporting that support decision-making and risk management.
• Contribute to cybersecurity governance and assurance activities.
• Manage relationships with cybersecurity solution providers.
• Support the administration and optimization of vulnerability management platforms.
• Participate in the evaluation and onboarding of new security technologies.
• Ensure cybersecurity tooling remains effective and aligned with business requirements.

Continuous Improvement & Cybersecurity Initiatives

• Evaluate new solutions and technologies that complement existing services.
• Contribute to cybersecurity maturity and resilience initiatives.
• Collaborate with experts across multiple cybersecurity domains.
• Participate in projects related to security monitoring, assurance, and risk management.
• Support improvements to operational processes and vulnerability management practices.

What We're Looking For

Mandatory Requirements

• Strong understanding of:
• Vulnerability Management
• Cybersecurity Risk Management
• Security Governance
• IT Risk
• Ability to assess and interpret cyber risks affecting business and technology environments.
• Understanding of internet-exposed systems and attack surface management.
• Knowledge of offensive security concepts, including:
• Vulnerability Assessment
• Security Testing Methodologies
• Ethical Hacking Principles
• Strong analytical and reporting capabilities.
• Professional proficiency in English.

Cybersecurity & Risk

• Vulnerability Management
• Security Ratings
• External Attack Surface Monitoring
• Security Governance

Offensive Security

• Security Audits
• Penetration Testing Concepts
• Vulnerability Assessment
• Security Analysis
• Threat Identification

Data Analysis & Reporting

• Microsoft Excel
• Power BI
• SQL
• Security Reporting
• KPI Monitoring

Security Platforms

Nice to have experience with:

• Qualys
• BitSight
• Vulnerability Scanning Platforms
• Security Exposure Management Tools

Nice to Have

• Experience working within Banking, Financial Services, or highly regulated environments.
• Knowledge of vulnerability scanning technologies.
• Experience with attack surface management platforms.
• Familiarity with cyber resilience and operational resilience frameworks.
• Exposure to cybersecurity assurance and governance programs.
• Interest in offensive security and ethical hacking methodologies.