Vulnerability Governance & Risk Analyst

Acrisure, LLC; Atlanta (GA); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Wellness resources

Job summary

Acrisure is seeking a Cybersecurity Vulnerability Governance Analyst in Atlanta to lead the Vulnerability Management Program with risk-based governance, reporting, and executive visibility. This role interfaces with Cybersecurity, IT Operations, Cloud, and business stakeholders to ensure timely remediation decisions and program integrity.

The analyst will drive metrics, dashboards, and governance processes, ensuring policy alignment and escalation when necessary.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Risk Management, Business Administration, or related field.
• 3+ years of experience in cybersecurity governance, risk management, compliance, audit, or vulnerability management.
• Knowledge of vulnerability management concepts, remediation workflows, risk-based decision making.
• Understanding of cybersecurity frameworks and standards including NIST, CIS Controls, ISO 27001, and COBIT.
• Experience developing executive reporting, metrics, dashboards, and performance indicators.
• Strong analytical, communication, and stakeholder management skills.
• Ability to coordinate activities across technical and non-technical teams.

Responsibilities

• Govern the enterprise Vulnerability Management Program to align with cybersecurity policies, standards, and risk requirements.
• Track vulnerabilities through identification, remediation, and closure.
• Monitor remediation performance against SLA and risk-based timelines.
• Facilitate regular vulnerability review meetings with infrastructure, cloud, endpoint, application, and business stakeholders.
• Coordinate remediation activities by validating ownership and risk prioritization across teams.
• Review, document, and manage vulnerability exception requests and risk acceptances.
• Escalate overdue vulnerabilities and unresolved risk issues to leadership.
• Develop and maintain dashboards, scorecards, and executive reporting.
• Drive continuous improvement and governance documentation across the program.
• Support audits and compliance assessments involving vulnerability management.

Skills

Governance

Risk management

Compliance

Stakeholder management

Analytical skills

Communication

Education

Bachelor's degree in Cybersecurity or related field

Tools

Archer

ServiceNow

MetricStream

Tenable

Qualys

Rapid7

Microsoft Defender VM

Job description

Acrisure is seeking a Cybersecurity Vulnerability Governance Analyst in Atlanta to lead the Vulnerability Management Program with risk-based governance, reporting, and executive visibility. This role interfaces with Cybersecurity, IT Operations, Cloud, and business stakeholders to ensure timely remediation decisions and program integrity.

The analyst will drive metrics, dashboards, and governance processes, ensuring policy alignment and escalation when necessary.