Lead Cybersecurity Risk & Vulnerability Management Analyst

The Judge Group; Dallas (TX); On-site; USD 85,000 - 110,000; Full time

Job summary

The Judge Group is seeking a Cybersecurity Risk & Vulnerability Management Analyst to evaluate vulnerabilities and incident-related risks, driving informed risk decisions and remediation actions across technology environments. You will partner with cybersecurity and technology teams to identify systemic issues, monitor remediation progress, and strengthen controls through data-driven analysis.

Responsibilities include prioritizing vulnerabilities, analyzing incidents, reviewing risk

Qualifications

• Experience in vulnerability management, cybersecurity operations, incident analysis, technology risk, or cyber assurance.
• Ability to evaluate risk beyond severity ratings and quantitative metrics.
• Experience communicating technical risk to diverse stakeholders and managing cross-functional follow-though.

Responsibilities

• Assess and prioritize vulnerabilities based on exploitability, business impact, attack paths, compensating controls, and asset criticality.
• Analyze security incidents and near misses to identify control weaknesses, root causes, and corrective actions.
• Review risk exceptions, remediation timelines, and exposure concentrations to ensure effective risk management.
• Track remediation commitments and elevate concerns related to ownership, evidence quality, dependencies, or recurring delays.
• Identify recurring trends across vulnerabilities and incidents, recommending control improvements and broader risk mitigation efforts.
• Collaborate with cybersecurity teams to improve detection, monitoring, response capabilities, and overall security posture.
• Contribute vulnerability and incident insights to emerging risk assessments and governance discussions.

Skills

Vulnerability management

Cybersecurity operations

Incident analysis

Risk evaluation

Stakeholder communication

Analytical thinking

Job description

As a Cybersecurity Risk & Vulnerability Management Analyst, you will evaluate security vulnerabilities and incident-related risks, helping drive informed risk decisions and remediation actions across technology environments. You will partner with cybersecurity and technology teams to identify systemic issues, monitor remediation progress, and strengthen security controls through data-driven analysis.

Responsibilities

• Assess and prioritize vulnerabilities based on exploitability, business impact, attack paths, compensating controls, and asset criticality.
• Analyze security incidents and near misses to identify control weaknesses, root causes, and corrective actions.
• Review risk exceptions, remediation timelines, and exposure concentrations to ensure effective risk management.
• Track remediation commitments and elevate concerns related to ownership, evidence quality, dependencies, or recurring delays.
• Identify recurring trends across vulnerabilities and incidents, recommending control improvements and broader risk mitigation efforts.
• Collaborate with cybersecurity teams to improve detection, monitoring, response capabilities, and overall security posture.
• Contribute vulnerability and incident insights to emerging risk assessments and governance discussions.

Minimum Qualifications

• Experience in vulnerability management, cybersecurity operations, incident analysis, technology risk, or cyber assurance.
• Knowledge of vulnerability exploitation, attack paths, compensating controls, incident root-cause analysis, and remediation validation.
• Ability to evaluate risk beyond severity ratings and quantitative metrics.
• Experience communicating technical risk to diverse stakeholders and managing cross-functional follow-through.
• Strong analytical, written, and problem-solving skills.

Preferred Qualifications

• Understanding of enterprise architecture, identity and access management (IAM), data security, workplace technology, and operational resilience.
• Experience balancing risk prioritization with practical business and technology considerations.
• Demonstrated ability to influence risk-based decisions in complex, fast-paced environments.