Senior Information Security Analyst – Vulnerability Management

Frost Bank; San Antonio (TX); On-site; USD 115,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

Long-term disability

Life insurance

401(k) matching

Generous paid time off

Tuition reimbursement

Employee Assistance Program

Referral bonus program

Job summary

Frost Bank is seeking an Information Security Analyst III – Vulnerability Management to protect IT data and systems. You will coordinate vulnerability and penetration testing, lead remediation efforts, and provide expert security guidance across the organization. A CISSP or progress toward it, plus strong communication, are key.

You’ll partner with teams to reduce risk, enhance detection and response, and maintain regulatory alignment in a complex banking environment.

Qualifications

• Bachelor's degree in IT Security or related field, or equivalent experience.
• 5+ years of experience in Information Security, Vulnerability Management, or related discipline.
• CISSP or ability to attain within 6 months.
• Excellent written and verbal communication for executive audiences.

Responsibilities

• Investigate, coordinate remediations, and manage vulnerabilities across enterprise systems.
• Lead incident response efforts with clear, strategic updates to executives.
• Articulate risk, impacts, and mitigation plans to technical and non-technical stakeholders.
• Analyze vulnerability data, validate findings, and guide remediation activities.
• Maintain and enhance security platforms to align with evolving threats.
• Document processes for vulnerability detection, remediation tracking, and compliance.

Skills

Vulnerability management

Security operations

Risk assessment

Incident response

Cloud security

Education

Bachelor's degree in IT Security

Tools

Tenable

Qualys

Rapid7

Job description

Frost Bank is seeking an Information Security Analyst III – Vulnerability Management to protect IT data and systems. You will coordinate vulnerability and penetration testing, lead remediation efforts, and provide expert security guidance across the organization. A CISSP or progress toward it, plus strong communication, are key.

You’ll partner with teams to reduce risk, enhance detection and response, and maintain regulatory alignment in a complex banking environment.