Vulnerability Management Specialist

About the role

The Vulnerability Management Specialist will lead the identification, assessment, prioritisation and remediation tracking of security vulnerabilities across the organisation. The role uses Qualys as the primary scanning platform, applies CVSS v3.1 scoring with business context, and provides executive‑level reporting aligned with the bank’s risk appetite.

Key responsibilities

• Perform regular vulnerability scans with Qualys across servers, databases, network devices, cloud and on‑premise assets.
• Validate findings, distinguish false positives and enrich CVSS scores with asset criticality, business impact and threat intelligence.
• Prioritise remediation actions, track progress against SLAs and maintain dashboards for visibility.
• Escalate overdue or high‑risk vulnerabilities to senior management.
• Prepare executive dashboards, quarterly posture reports and support risk committees, the CISO and board‑level discussions.
• Coordinate internal and external penetration testing engagements, ensure proper documentation and closure of findings.
• Continuously improve processes, integrate threat intelligence and ensure compliance with internal policies and banking regulations.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or a related field.
• 4–8+ years of experience in vulnerability management or security operations, preferably in a banking or regulated environment.
• Proven experience designing and running enterprise‑scale vulnerability assessment programs.

Required skills

• Qualys Vulnerability Management (mandatory).
• CVSS v3.1 scoring and risk‑based prioritisation.
• Familiarity with other scanning tools such as Tenable and Rapid7.
• Dashboarding tools like Power BI or Tableau.