Senior Vulnerability Management Analyst

The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. Systemone is seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large scale financial services technology environment.

Job Title: Senior Vulnerability Management Analyst
Duration: Full-Time Hire / Permanent Role
Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL
Work Mode: Hybrid - 3days onsite – 2 days remote

Position Description
Systemone is seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large scale financial services technology environment.

This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership.

Your future duties and responsibilities

• Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks.
• Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments.
• Track remediation progress, aging, and SLA adherence and identify issues requiring escalation.
• Support vulnerability risk assessments, exception reviews, and risk acceptance processes.
• Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps.
• Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders.
• Maintain vulnerability management standards, procedures, guidelines, and supporting documentation.
• Document process flows, remediation workflows, escalation paths, and governance processes.
• Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance.
• Partner with technology and security teams to improve vulnerability management processes and data quality.

Required qualifications to be successful in this role

• 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field.
• Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment.
• Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms.
• Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations.
• Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements.
• Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting.
• Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis.
• Experience developing executive or leadership level reporting and presentations using PowerPoint.
• Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation.
• Experience documenting process flows and vulnerability remediation/governance workflows.
• Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps.
• Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams.
• Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required.

Ref: #404-IT Pittsburgh