Cybersecurity Vulnerability Management & Assurance Specialist

About the role

The role focuses on protecting the organisation’s digital assets by continuously identifying, analysing and mitigating security vulnerabilities across the entire IT landscape. You will work closely with infrastructure, network and application teams to ensure a robust vulnerability management programme that aligns with industry standards.

Key responsibilities

• Perform regular authenticated and unauthenticated vulnerability scans using tools such as Nessus, Qualys, or equivalents.
• Validate scan results, eliminate false positives and analyse findings using CVSS scoring.
• Prioritise remediation efforts based on business criticality, asset exposure and exploit availability.
• Coordinate remediation activities with server, network and application teams, tracking progress through ServiceNow or Jira and ensuring closure within defined SLAs.
• Prepare detailed vulnerability reports, dashboards and trend analyses for technical teams and senior management.
• Support compliance initiatives for standards such as ISO/IEC 27001 and NIST.
• Deliver security awareness and training sessions on secure configuration, patch management and vulnerability mitigation techniques.

Required profile

• Hands‑on experience with vulnerability scanning tools and a solid understanding of Windows and Linux operating‑system vulnerabilities.
• Familiarity with network and web‑application security fundamentals.
• Ability to analyse CVE data, assess risk and communicate findings effectively to technical and non‑technical stakeholders.
• Proactive attitude with strong collaboration skills to drive timely remediation.

Required skills

• Nessus
• Qualys
• ServiceNow
• Jira
• Windows
• Linux
• CVE analysis
• Patch management
• Vulnerability management processes
• Network security basics
• Web application security basics