Senior Vulnerability Management Analyst

System One; Birmingham (AL); On-site; USD 110,000 - 160,000; Full time

Job summary

System One, Inc. is seeking a Senior Vulnerability Management Analyst to support governance, risk management, compliance, and remediation oversight in a large-scale financial services technology environment.

You will track vulnerabilities, escalate issues, and provide leadership with clear reporting across cybersecurity, infrastructure, cloud, and risk teams. Ideal candidates bring 8+ years in cybersecurity and proven expertise in vulnerability remediation governance, executive-level reporting,

Qualifications

• 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field.
• Strong experience with vulnerability management and remediation governance in a large enterprise.
• Working knowledge of vulnerability management across AWS/cloud environments and related platforms.
• Experience tracking remediation, aging, SLA compliance, risk exceptions, and escalations.
• Strong cybersecurity risk management, governance, and compliance understanding.
• Ability to analyze large vulnerability datasets and produce actionable risk reporting.
• Advanced Excel skills (pivot tables, VLOOKUP/XLOOKUP), data cleansing and trend analysis.
• Experience developing executive level reporting and PowerPoint presentations.
• Strong technical writing for security standards, procedures, and governance docs.
• Experience documenting remediation/workflow processes and governance flows.

Responsibilities

• Manage vulnerability governance activities and support policy compliance.
• Analyze vulnerability data and remediation metrics across technology domains including cloud.
• Track remediation progress, aging, SLAs, and escalation needs.
• Support risk assessments, exception reviews, and risk acceptance processes.
• Monitor control effectiveness and identify recurring vulnerabilities and gaps.
• Prepare metrics, trends, dashboards, and governance reporting for leadership.
• Maintain vulnerability management standards, procedures, and documentation.
• Document process flows, remediation workflows, and escalation paths.
• Maintain evidence supporting audits and regulatory reviews.
• Collaborate with tech and security teams to improve processes and data quality.

Skills

Vulnerability governance

Executive reporting

Data analysis

Excel (Pivot, VLOOKUP)

PowerPoint presentations

Education

Bachelor's degree in Computer Science / Cybersecurity / IT

Tools

AWS

Vulnerability scanners

Security dashboards

Job description

Job Title

Senior Vulnerability Management Analyst

Location

Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL

Type

Permanent Fulltime

Overview

Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment.

This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership.

This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL

Responsibilities

• Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks.
• Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments.
• Track remediation progress, aging, and SLA adherence and identify issues requiring escalation.
• Support vulnerability risk assessments, exception reviews, and risk acceptance processes.
• Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps.
• Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders.
• Maintain vulnerability management standards, procedures, guidelines, and supporting documentation.
• Document process flows, remediation workflows, escalation paths, and governance processes.
• Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance.
• Partner with technology and security teams to improve vulnerability management processes and data quality.

Requirements

• 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field.
• Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment.
• Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms.
• Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations.
• Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements.
• Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting.
• Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis.
• Experience developing executive or leadership level reporting and presentations using PowerPoint.
• Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation.
• Experience documenting process flows and vulnerability remediation/governance workflows.
• Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps.
• Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams.
• Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention.
• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required.

#M- #LI- Ref: #404-IT Pittsburgh