Cybersecurity Vulnerability Management Analyst

act digital; Porto; Híbrido; EUR 35 000 - 55 000; Tempo integral

Resumo da oferta

act digital in Porto, Portugal, is seeking a Cybersecurity Vulnerability Management Analyst to strengthen cyber resilience across a global environment. The role focuses on identifying and managing vulnerabilities in internet-facing assets within a large-scale security program.

You will work with cybersecurity experts, risk specialists, and international stakeholders, contributing to risk reduction, security controls, dashboards, and reporting.

Qualificações

• Experience in cybersecurity, IT risk management, or vulnerability management.
• Strong analytical skills and ability to interpret data.
• Excellent communication with stakeholders.
• Fluent English, written and spoken.
• Experience with vulnerability scanning and security monitoring tools.

Responsabilidades

• Perform vulnerability assessments and scans on internet-exposed assets.
• Monitor and manage external security ratings.
• Analyze vulnerabilities, assess risks, and support remediation.
• Coordinate with internal teams and stakeholders to improve security posture.
• Manage relationships with cybersecurity software vendors.
• Oversee SaaS vulnerability management and security rating solutions.
• Develop security reports, dashboards, and risk metrics for senior management.
• Present findings to leadership and stakeholders.
• Contribute to evaluating new tools and services.
• Support continuous improvement of vulnerability management processes.
• Collaborate with cybersecurity and IT risk teams on transversal security projects.

Conhecimentos

Cybersecurity

IT Risk Management

Vulnerability Management

Analytical skills

Communication

English (Fluent)

Cross-cultural teamwork

Ferramentas

Vulnerability scanning tools

Security monitoring tools

Excel

Power BI

SQL

Descrição da oferta de emprego

We are looking for a Cybersecurity Vulnerability Management Analyst to join an international cybersecurity team focused on strengthening cyber resilience, IT risk management, and security assurance across a complex global environment.

This role offers the opportunity to work on large-scale cybersecurity initiatives, helping to identify and manage vulnerabilities across internet-facing assets while contributing to the continuous improvement of security controls, risk reduction, and digital resilience.

You will collaborate with cybersecurity professionals, risk specialists, and stakeholders across multiple countries, gaining exposure to a broad range of cybersecurity domains and technologies.

Hybrid Work: 2-3x in the office in Lisbon or Porto

Key Responsibilities

• Perform vulnerability assessments and scans on internet-exposed assets.
• Monitor and contribute to the management of external security ratings.
• Analyze vulnerabilities, assess associated risks, and support remediation efforts.
• Coordinate with internal teams and stakeholders to track and improve security posture.
• Manage relationships with cybersecurity software vendors and service providers.
• Administer and oversee SaaS-based vulnerability management and security rating solutions.
• Develop security reports, dashboards, and risk metrics for senior management.
• Present vulnerability and security posture findings to cybersecurity leadership and key stakeholders.
• Contribute to the evaluation and implementation of new cybersecurity tools and services.
• Support continuous improvement initiatives within vulnerability management processes.
• Collaborate with cybersecurity and IT risk teams on transversal security projects.

Required Profile

• Previous experience in Cybersecurity, IT Risk Management, or Vulnerability Management.
• Good understanding of:
• Cybersecurity principles
• IT infrastructure and systems
• Vulnerability management processes
• Security risk assessment
• Experience working with vulnerability scanning and security monitoring tools.
• Strong analytical skills with the ability to interpret technical and risk-related data.
• Excellent communication skills and ability to engage with technical and non-technical stakeholders.
• Fluent English, both written and spoken.
• Ability to work effectively within international and multicultural teams.

Technical Skills

Mandatory

• Knowledge of vulnerability management and security rating methodologies.
• Understanding of cyber threats and risk management concepts.
• Proficiency in:, Microsoft Excel, Power BI, SQL
• Experience creating reports, dashboards, and security metrics.