IT&Data Vunerability Analyst

Job Description:

• Role Summary
• The IT Data Vulnerability Analyst is responsible for identifying assessing prioritizing and tracking vulnerabilities across Danone s IT infrastructure cloud environments endpoints applications and digital assets
• The role supports proactive cyber risk reduction by ensuring timely remediation of vulnerabilities and providing visibility into the organization s threat exposure

Key Responsibilities:

• Key Responsibilities
• Vulnerability Management Operations
• Execute vulnerability scanning activities across infrastructure applications cloud and endpoints
• Analyze vulnerability assessment results and determine risk levels
• Validate remediation activities and vulnerability closure
• Risk Assessment Prioritization
• Assess vulnerability severity using CVSS business criticality threat intelligence and exploitability
• Prioritize remediation actions based on risk exposure
• Support risk acceptance and exception management processes
• Reporting Metrics
• Maintain vulnerability management dashboards and KPIs
• Produce regular reports for technical teams and management
• Track remediation performance against agreed SLAs
• Stakeholder Collaboration
• Collaborate with infrastructure cloud application and security teams
• Support vulnerability remediation planning and execution
• Provide guidance on remediation best practices
• Continuous Improvement
• Support implementation of Threat Exposure Management capabilities
• Improve vulnerability management processes and reporting
• Monitor emerging threats and critical vulnerabilities
• Required Skills Competencies
• Must Have
• Functional Technical Skills
• Vulnerability Management processes and tools
• Vulnerability assessment methodologies
• CVSS scoring and risk prioritization
• Knowledge of operating systems networks databases and cloud environments
• Understanding of threat intelligence and cyber risk concepts
• Reporting analytics and dashboard management
• Behavioral Competencies
• Strong analytical skills
• Attention to detail
• Stakeholder engagement capabilities
• Problem solving mindset
• Ability to manage multiple priorities

Technical Requirements:

• Ability to manage multiple priorities
• Good to Have
• Functional Technical Skills
• Tenable Qualys Rapid7 Microsoft Defender Vulnerability Management
• Vulnerability remediation and patch management processes
• Attack Surface Management ASM
• Exposure Management platforms
• Automation and scripting PowerShell Python
• Behavioral Competencies
• Project coordination experience
• Process improvement mindset

Preferred Skills:

Technology->Cloud Security->AWS - Vulnerability Management,Technology->Application Security->Vulnerability Management,Technology->Cloud Security->Microsoft Azure - Infrastructure security->Microsoft Defender ATP,Technology->Risk Management->Risk Management System,Technology->Security Operations->SOAR