Senior Vulnerability Management Analyst

System One; Knoxville (TN); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Systemone is seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large scale financial services technology environment.

This role focuses on ensuring vulnerabilities are tracked, prioritized, escalated, and remediated in accordance with security standards and service levels, working across cybersecurity, infra, cloud, applications, and risk teams.

Qualifications

• 8+ years in cybersecurity or risk management.
• Experience with vulnerability governance in large enterprises.
• AWS/cloud vulnerability management knowledge.
• Track remediation, aging, and SLA compliance.
• Understand cybersecurity risk management and governance.
• Analyze large vulnerability datasets for risk reporting.
• Advanced Excel skills (pivot, VLOOKUP, XLOOKUP, cleansing).
• Experience creating executive level PowerPoint reporting.
• Strong technical writing for security standards and docs.
• Document vulnerability workflows and governance processes.

Responsibilities

• Manage vulnerability governance activities and ensure policy compliance.
• Analyze vulnerability data and remediation metrics across tech domains.
• Track remediation progress, aging, and SLA adherence with escalation.
• Support risk assessments, exception reviews, and risk acceptance processes.
• Monitor control effectiveness and identify recurring vulnerabilities.
• Prepare vulnerability metrics, trends, and governance dashboards for leadership.
• Maintain vulnerability management standards, procedures, and docs.
• Document process flows, remediation workflows, and escalation paths.
• Maintain evidence supporting audits, regulatory reviews, and risk acceptance.
• Collaborate with security, cloud, infrastructure, and risk teams to improve data quality.

Skills

Vulnerability governance

Cybersecurity risk management

Excel

PowerPoint reporting

Data analysis

Cross-functional collaboration

Technical writing

Education

Bachelor's degree in Computer Science / Cybersecurity / IT

Tools

AWS

Cloud platforms

Excel

PowerPoint

Job description

Job Title: Senior Vulnerability Management Analyst

Duration: Full-Time Hire / Permanent Role

Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL

Work Mode: Hybrid - 3days onsite – 2 days remote

Position Description

Systemone is seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large scale financial services technology environment.

This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership.

Your future duties and responsibilities

• Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks.
• Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments.
• Track remediation progress, aging, and SLA adherence and identify issues requiring escalation.
• Support vulnerability risk assessments, exception reviews, and risk acceptance processes.
• Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps.
• Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders.
• Maintain vulnerability management standards, procedures, guidelines, and supporting documentation.
• Document process flows, remediation workflows, escalation paths, and governance processes.
• Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance.
• Partner with technology and security teams to improve vulnerability management processes and data quality.

Required qualifications to be successful in this role

• 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field.
• Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment.
• Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms.
• Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations.
• Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements.
• Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting.
• Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis.
• Experience developing executive or leadership level reporting and presentations using PowerPoint.
• Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation.
• Experience documenting process flows and vulnerability remediation/governance workflows.
• Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps.
• Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams.
• Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required.

Ref: #404-IT Pittsburgh