Cyber Security Analyst II

Soho Square Solutions; New York (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

Soho Square Solutions is seeking a Vulnerability Patch Management Analyst to lead the lifecycle of patch management across our IT landscape. You will analyze vulnerabilities, coordinate remediation, and drive KPI-driven programs with cross-functional teams across the Americas and Head Office.

The role requires experience with SIEM tools, vulnerability scanning, and reporting dashboards, plus strong knowledge of security frameworks. On-site work in New York is expected.

Qualifications

• Proven experience in vulnerability management, patch management, or related security roles with oversight of POAM.
• Ability to use AI to automate manual security processes.
• Strong understanding of security vulnerabilities and their impact on systems.
• Experience with vulnerability management and SIEM tools.
• SIEM experience with dashboards and reports; vulnerability tooling for scanning, remediation.

Responsibilities

• Drive full vulnerability patch management lifecycle for infrastructure, systems, apps, and SDLC.
• Deliver high-quality VPM reporting to leadership and teams.
• Collaborate with IT stakeholders across Americas, Head Office, and international platforms.
• Assess vulnerability impact to inform strategic remediation.
• Prioritize patches and manage SLA breaches; develop follow-up plans.
• Design and enhance VPM procedures and processes.
• Participate in vulnerability assessments and track updates.
• Strengthen compliance with security practices and approved tools.
• Liaise with Second Line of Defense and auditors.
• Develop and maintain patch management strategy.
• Assist IT teams with vendor patch acquisition and deployment.
• Monitor and improve patch management effectiveness.
• Stay current on industry best practices and threats.
• Provide backup support for cybersecurity projects and audits.

Skills

Vulnerability management

Patch management

POAM

AI initiatives

SIEM

Power BI

Excel/Power Query

Scripting

Documentation

Networking fundamentals

ISO/NIST/CIS frameworks

Tools

SIEM tools

Power BI

Excel/Power Query

Vulnerability scanners

Scripting languages

VMware

Job description

The duties of the analyst include analyzing all relevant cyber security event data and other data sources for attack indicators and potential security breaches; produce reports, assist in coordination during incidents; and coordinate with defense teams to ensure all security monitoring systems on-line, up to date and operational. The duty of the analyst includes managing and optimizing our vulnerability and patch management process. Your mandate will include the proactive identification and efficient monitoring and remediation of security vulnerabilities across our entire IT landscape. You will collaborate closely with cross-functional teams across the Americas platform and with Head Office to develop and implement robust vulnerability and patch management strategies and processes. In this consulting engagement, you will drive daily operations, lead initiatives to enhance our Americas CIB Vulnerability Patch Management program and provide expert guidance. You will be responsible for developing and presenting key performance indicators (KPIs), adapting to key risk indicators (KRIs), and advancing the program through a sophisticated, risk-based approach. Your strategic recommendations and execution will be crucial in focusing remediation efforts and providing clear insights to key stakeholders.

The Vulnerability Patch Management analyst will

• Drive the full vulnerability patch management lifecycle: identification, prioritization, and remediation for all infrastructure, systems, applications, and SDLC.
• Deliver consistent, high-quality VPM reporting to leadership and relevant teams.
• Collaborate extensively with IT stakeholders across the Americas, Head Office, and international platforms.
• Assess vulnerability impact and risk levels to inform strategic remediation.
• Prioritize patch deployments and manage SLA breaches, developing and executing follow-up plans.
• Design and enhance VPM procedures and processes.
• Participate in vulnerability assessments and track software/system updates.
• Strengthen compliance and adherence to security best practices and approved tools.
• Liaise with Second Line of Defense and auditors.
• Coordinate the development and maintenance of a comprehensive patch management strategy.
• Assist IT teams with timely vendor patch acquisition and deployment.
• Monitor and report on patch management effectiveness, implementing improvements.
• Stay current on industry best practices and emerging threats.
• Provide backup support for cybersecurity projects, incidents, and audit remediation.
• Be available for off-hours support as needed to address emergent threats.

Skills:

• Proven experience in vulnerability management, patch management, or related security roles with oversight of Plans of Action and Milestones (POAM).
• Ai initiatives – ability to use Ai to automate manual processes and tasks.
• Strong understanding of common security vulnerabilities and the ability to assess their impact on systems and infrastructure.
• Experience with vulnerability management and SIEM tools.
• SIEM experienced with creating dashboard and report Vulnerability Tool experience in conducting scan, treatment, and remediation
• Familiarity with security, IT Audit frameworks and standards (NIST. FFIEC handbooks etc.) Excellent communication and collaboration skills for management presentation materials and ability to work effectively with cross-functional teams.
• Experience on reporting and analysis tools is required - Power Bl, Advanced Excel/Power Query.
• Scripting experience.
• Enhancement of existing documentations including procedures, playbooks, and runbooks Deep understanding of network devices and architecture, TCP/IP, network protocols, server operating systems, and vulnerability scanning.
• Strong understanding of internal control concepts and policies with focus on improving process/procedure manuals and documentation.
• Strong knowledge of cyber-security frameworks (such as ISO 27001, NIST CSF, CIS, etc.) Knowledge of Windows, Linux/Unix, VMware, IDS/IP, forensic discovery.
• Strong interpersonal and communication skills and the ability to work effectively with a wide range of constituencies in a diverse community.