Senior Vulnerability & Remediation Governance Analyst

System One, Inc.

Birmingham (AL)

On-site

USD 110,000 - 160,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

System One, Inc. is seeking a Senior Vulnerability Management Analyst to support governance, risk management, compliance, and remediation oversight in a large-scale financial services technology environment.

You will track vulnerabilities, escalate issues, and provide leadership with clear reporting across cybersecurity, infrastructure, cloud, and risk teams. Ideal candidates bring 8+ years in cybersecurity and proven expertise in vulnerability remediation governance, executive-level reporting,

Qualifications

8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field.
Strong experience with vulnerability management and remediation governance in a large enterprise.
Working knowledge of vulnerability management across AWS/cloud environments and related platforms.
Experience tracking remediation, aging, SLA compliance, risk exceptions, and escalations.
Strong cybersecurity risk management, governance, and compliance understanding.
Ability to analyze large vulnerability datasets and produce actionable risk reporting.
Advanced Excel skills (pivot tables, VLOOKUP/XLOOKUP), data cleansing and trend analysis.
Experience developing executive level reporting and PowerPoint presentations.
Strong technical writing for security standards, procedures, and governance docs.
Experience documenting remediation/workflow processes and governance flows.

Responsibilities

Manage vulnerability governance activities and support policy compliance.
Analyze vulnerability data and remediation metrics across technology domains including cloud.
Track remediation progress, aging, SLAs, and escalation needs.
Support risk assessments, exception reviews, and risk acceptance processes.
Monitor control effectiveness and identify recurring vulnerabilities and gaps.
Prepare metrics, trends, dashboards, and governance reporting for leadership.
Maintain vulnerability management standards, procedures, and documentation.
Document process flows, remediation workflows, and escalation paths.
Maintain evidence supporting audits and regulatory reviews.
Collaborate with tech and security teams to improve processes and data quality.