The Vulnerability Remediation Specialist is responsible for managing and driving the timely remediation of security vulnerabilities identified through Vulnerability Assessment (VA) scanning activities. This role serves as the primary liaison between Security, Infrastructure, Server, and Network Platform teams to ensure that identified findings are assessed, prioritised, and remediated in accordance with organisational security policies and compliance requirements.
Key responsibilities include:
- Review and analyse vulnerability assessment reports from approved scanning tools.
- Engage with Server, Network, and Infrastructure teams to coordinate remediation activities and ensure vulnerabilities are addressed within defined service level targets.
- Track remediation progress, identify blockers, and escalate overdue findings as required.
- Validate remediation actions and support vulnerability closure verification processes.
- Ensure all remediation activities are performed in compliance with established IT governance processes, including Change Management and Risk Management procedures.
- Facilitate risk acceptance, exception requests, and compensating control reviews when remediation cannot be completed within required timelines.
- Maintain accurate records, reporting, and metrics on vulnerability remediation performance.
- Support audit, compliance, and regulatory requirements by providing evidence of vulnerability management activities.
- Collaborate with security, operations, and application teams to improve remediation processes and reduce organizational risk.
- Complete all assigned, mandatory training within the timeframe provided
Conduct and/or participate in regularly scheduled 1:1 meeting with direct manager and/or direct reports.
-
Required Skills & Experience
- Experience working with vulnerability management or cybersecurity remediation programs.
- Understanding of vulnerability assessment tools such as Tenable, Qualys, or similar platforms.
- Knowledge of IT infrastructure, including servers, operating systems, network devices, and cloud environments.
- Familiarity with Change Management, Risk Management, and IT Service Management (ITSM) processes.
- Strong stakeholder management and communication skills, with the ability to influence technical teams and drive timely action.
- Excellent organizational skills with the ability to manage multiple remediation activities simultaneously.
- Experience in compliance, audit support, or cybersecurity governance is desirable.
This role plays a critical part in reducing organizational cyber risk by ensuring security vulnerabilities are remediated effectively, efficiently, and in accordance with established governance processes.
