Vulnerability Management

Role & responsibilities

Key Responsibilities:

- VM Ops Lead

• Serving as a backup manager to a VM Operations team of six
• Working directly for the IN VM Operations Manager
• Meeting regularly with New Group Entity CISO Manager as well as Technology Teams
• Perform and report on all VM and SBC operations deliverables for new Group Entity
• Maintain new Group Entity VM scan coverage, SBC compliance, console upgrades, control reporting, credential failures, console configuration, scan agents
• Monthly VM reporting and remediation tracking

- SBC

• Perform regular security policy scans across all new group entity technologies
• Analyse scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities.
• Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.
• Work closely with infrastructure and application teams to ensure SBC compliance
• Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.
• Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.
• Participate in audits, compliance checks, and regulatory reporting related to environment security.
• Contribute to the continuous improvement of security scanning processes and tools.

Required Skills:

- Operational and cyber security background

- Small team management background

- Strong communication, delegation, decision making, time management and problem-solving skills

- Basic knowledge of CIS benchmarks for Unix, Windows, Networks, AWS, etc.

- Hands-on experience with vulnerability scanning and compliance tools like Rapid7, Tenable, Qualys, or equivalent.

- Understanding of cloud security principles and virtualization environments.

- Analytical mindset with the ability to interpret scan results and communicate recommendations.

- Strong collaboration and communication skills to work with cross-functional teams.

Preferred Skills

- Experience with automation and scripting (e.g., Python, Bash, PowerShell) to automate scanning tasks.

- Familiarity with any DB scripting language

- Exposure to security in financial institutions or highly regulated industries.