Vulnerability Governance & Risk Analyst

Acrisure; Grand Rapids (MI); On-site; USD 85,000 - 125,000; Full time

Job summary

Acrisure is seeking a Cybersecurity Vulnerability Governance Analyst to govern and oversee the organization's Vulnerability Management Program. You will bridge Cybersecurity, IT Operations, and business stakeholders to ensure vulnerabilities are evaluated, remediated, or escalated according to policy.

This role focuses on governance, risk reporting, metrics, and executive-level visibility. You will drive accountability, support regulatory compliance, and help reduce exposure by aligning

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Risk Management, Business Administration, or a related field.

Responsibilities

• Govern the enterprise Vulnerability Management Program in line with policies and risk requirements.
• Track vulnerabilities from identification to remediation or closure.
• Monitor remediation performance against SLAs and timelines.
• Coordinate regular vulnerability review meetings with stakeholders across infrastructure, cloud, and applications.
• Provide risk-based reporting and executive visibility into vulnerability posture.
• Support audits and regulatory examinations related to vulnerability management.

Skills

Analytical skills

Communication skills

Stakeholder management

Vulnerability management knowledge

Risk-based decision making

Governance experience

Cybersecurity fundamentals

Education

Bachelor's degree in Cybersecurity/Info Sec/IT/ Risk Mgmt

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender Vulnerability Management

Archer

ServiceNow

MetricStream

Job description

Acrisure is seeking a Cybersecurity Vulnerability Governance Analyst to govern and oversee the organization's Vulnerability Management Program. You will bridge Cybersecurity, IT Operations, and business stakeholders to ensure vulnerabilities are evaluated, remediated, or escalated according to policy.

This role focuses on governance, risk reporting, metrics, and executive-level visibility. You will drive accountability, support regulatory compliance, and help reduce exposure by aligning