Senior Vulnerability Management Analyst

System One; Knoxville (TN); On-site; USD 120,000 - 180,000; Full time

Job summary

System One seeks a Senior Vulnerability Management Analyst to support vulnerability governance and remediation oversight in a large financial services tech environment. The role requires tracking vulnerabilities across cloud, AWS, and on-premises infrastructure, with a focus on risk-informed prioritization and leadership reporting.

Responsibilities include governance, metrics reporting, and process documentation while collaborating across cybersecurity, risk, and infrastructure teams to improve

Qualifications

• 8+ years in cybersecurity, technology risk, or vulnerability management.
• Experience with vulnerability governance in large enterprises.
• Knowledge of vulnerability management across AWS/cloud environments.
• Track remediation, aging, SLA compliance, risk exceptions, and escalations.
• Strong risk management, controls, governance, and compliance understanding.
• Ability to analyze large vulnerability datasets and report findings.

Responsibilities

• Manage vulnerability governance activities and ensure policy compliance.
• Analyze vulnerability data and remediation metrics across tech domains.
• Track remediation progress, aging, SLA adherence, and escalations.
• Support risk assessments, exception reviews, and risk acceptance.
• Monitor control effectiveness and identify systemic risks and gaps.
• Prepare vulnerability metrics, trends, dashboards for leadership.
• Maintain standards, procedures, and governance documentation.
• Document remediation/workflow processes and escalation paths.
• Maintain evidence for audits and regulatory reviews.
• Collaborate with security, cloud, infra, and risk teams to improve processes.

Skills

Cybersecurity risk management

Vulnerability governance

Data analysis

Executive reporting

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Excel

PowerPoint

Job description

Job Title: Senior Vulnerability Management Analyst
Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL
Type: Permanent Fulltime

Overview

Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment.

This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership.

This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL

Responsibilities

• Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks.
• Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments.
• Track remediation progress, aging, and SLA adherence and identify issues requiring escalation.
• Support vulnerability risk assessments, exception reviews, and risk acceptance processes.
• Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps.
• Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders.
• Maintain vulnerability management standards, procedures, guidelines, and supporting documentation.
• Document process flows, remediation workflows, escalation paths, and governance processes.
• Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance.
• Partner with technology and security teams to improve vulnerability management processes and data quality.

Requirements

• 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field.
• Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment.
• Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms.
• Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations.
• Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements.
• Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting.
• Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis.
• Experience developing executive or leadership level reporting and presentations using PowerPoint.
• Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation.
• Experience documenting process flows and vulnerability remediation/governance workflows.
• Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps.
• Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams.
• Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention.
• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required.

#M-
#LI-
Ref: #404-IT Pittsburgh