Vulnerability Governance & Risk Analyst

Acrisure; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Life and disability insurance

401(k) with company match

Paid time off

Job summary

Acrisure is seeking a Cybersecurity Vulnerability Governance Analyst to govern the Vulnerability Management Program, provide risk reporting, and drive governance across IT and business units.

The role bridges Cybersecurity, IT Operations, Infrastructure, Cloud, and Application Development to ensure vulnerabilities are evaluated, remediated, or escalated per policy and risk tolerance. On-site collaboration is required.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, Risk or related field.
• 3+ years in cybersecurity governance, risk management, compliance, audit, or vulnerability management.
• Knowledge of vulnerability management concepts, remediation workflows, and risk-based decision making.
• Understanding of NIST, CIS Controls, ISO 27001, and COBIT.
• Experience creating executive reporting, metrics, dashboards, and KPIs.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Govern the enterprise Vulnerability Management Program per policy and risk standards.
• Track vulnerabilities lifecycle from identification to remediation or closure.
• Monitor remediation performance against SLAs and risk timelines.
• Lead vulnerability review meetings with infrastructure, cloud, endpoints, apps, and business teams.
• Coordinate remediation ownership, accountability, and risk prioritization.
• Manage vulnerability exception requests and risk acceptances.
• Provide risk-based reporting to leadership and governance forums.
• Develop dashboards, scorecards, and executive risk reporting.
• Support audits and regulatory examinations related to vulnerability management.
• Drive program governance, standards, and continuous improvement.

Skills

Vulnerability governance

Risk management

Regulatory compliance

Executive reporting

Stakeholder management

Analytics

Cross-functional collaboration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Archer or ServiceNow or MetricStream

COBIT / NIST / ISO 27001 frameworks

Job description

Acrisure is seeking a Cybersecurity Vulnerability Governance Analyst to govern the Vulnerability Management Program, provide risk reporting, and drive governance across IT and business units.

The role bridges Cybersecurity, IT Operations, Infrastructure, Cloud, and Application Development to ensure vulnerabilities are evaluated, remediated, or escalated per policy and risk tolerance. On-site collaboration is required.