Vulnerability Governance & Reporting Analyst

The position focuses on establishing robust governance frameworks, improving data quality, and driving accountability across remediation processes to ensure vulnerabilities and configuration gaps are addressed in a timely and risk-informed manner. The Vulnerability Governance & Reporting Analyst is responsible for strengthening enterprise governance to reduce the backlog of vulnerabilities and misconfigurations while enabling scalable, data-driven capabilities that support AI readiness across the organization.

The Vulnerability Governance & Reporting Analyst is responsible for strengthening enterprise governance to reduce the backlog of vulnerabilities and misconfigurations while enabling scalable, data-driven capabilities that support AI readiness across the organization. This role serves as a critical bridge between vulnerability management operations, governance, and emerging AI initiatives.
 
The position focuses on establishing robust governance frameworks, improving data quality, and driving accountability across remediation processes to ensure vulnerabilities and configuration gaps are addressed in a timely and risk-informed manner. The role also ensures that vulnerability and configuration data is structured, normalized, and actionable, forming a reliable foundation for AI-driven insights, automation, and advanced analytics.
 
This individual partners closely with Cybersecurity, Infrastructure, Cloud, and Data teams to optimize workflows, enforce SLA adherence, and enhance reporting transparency. The role is instrumental in transitioning the VMCA program from reactive backlog management to a proactive, intelligence-driven, and AI-enabled capability.
 
Technical Skills
Vulnerability & Configuration Platforms: Strong experience with Qualys, Wiz, and similar platforms, including data validation and workflow integration
 
Governance & Risk Management: Deep understanding of vulnerability lifecycle governance, SLA management, and risk acceptance processes
 
Data & AI Enablement: Experience preparing and structuring datasets for analytics and AI use cases. Familiarity with data normalization, enrichment, and aggregation across security tools
 
Automation & Integration: Proficiency with automation (e.G., PowerShell, Python) and integration with platforms such as ServiceNow, JupiterOne, CMDB, and data pipelines
 
Analytics & Reporting: Experience building dashboards and executive reporting (e.G., Tableau) focused on risk reduction, backlog trends, and SLA performance
 
Core Strengths
Governance Leadership: Ability to establish and enforce structured governance models that drive accountability and measurable outcomes
 Strategic Thinking & AI Alignment: Forward-looking mindset focused on enabling AI-driven capabilities through strong data and process foundations
 Operational Execution & Backlog Reduction: Proven ability to reduce large-scale vulnerability backlogs through prioritization, process improvement, and stakeholder alignment
 Data-Driven Decision Making: Strong analytical mindset with the ability to translate complex data into actionable insights and measurable outcomes
 Executive Communication: Ability to communicate risk, progress, and strategy in a clear, concise, and leadership-ready format
 Cross-Functional Influence: Skilled at driving alignment across teams with competing priorities to achieve enterprise risk reduction goals
 Strategic Thinking & AI Alignment: Forward-looking mindset focused on enabling AI-driven capabilities through strong data and process foundations
 Operational Execution & Backlog Reduction: Proven ability to reduce large-scale vulnerability backlogs through prioritization, process improvement, and stakeholder alignment
 Data-Driven Decision Making: Strong analytical mindset with the ability to translate complex data into actionable insights and measurable outcomes
 Executive Communication: Ability to communicate risk, progress, and strategy in a clear, concise, and leadership-ready format
 Cross-Functional Influence: Skilled at driving alignment across teams with competing priorities to achieve enterprise risk reduction goals
 
Education:     

• Bachelor's Degree