Enterprise Cybersecurity Vulnerability Risk Analyst

Enterprise Cybersecurity Vulnerability Risk AnalystThe Opportunity:

Cyber threats are everywhere, and vulnerabilities can create risk quickly when findings are not reviewed, prioritized, tracked, and resolved through clear ownership. In all of this cyber noise, how can organizations make practical, risk-informed decisions about vulnerability remediation, deferrals, exceptions, and appeals? The answer is you — an information security risk specialist who can help turn complex vulnerability information into clear decisions and accountable action.

As a Vulnerability Exception and Deferral Analyst on our Enterprise IT and Cyber Risk team, you’ll manage the operational lifecycle of vulnerability exceptions, deferrals, appeals, and related risk decisions. You’ll review technical and business justifications, validate mitigating controls, assess risk impact, and help determine whether requests align with enterprise standards, risk tolerance, and compliance expectations. You’ll partner with vulnerability management, cyber architecture and engineering, hosting, network services, business information security officers, technical risk officers, product owners, and system owners to support timely, consistent, and defensible remediation decisions.

You’ll use ServiceNow and related workflow tools to track vulnerability risk decisions, maintain accurate records, identify aging or bottlenecked items, and generate reporting on exception trends, workflow metrics, remediation status, and recurring risk themes. You’ll help improve the consistency and maturity of the vulnerability exception and deferral program by strengthening intake criteria, decision documentation, escalation paths, and operational reporting. This is your opportunity to support a high-impact cyber risk process while broadening your skills in vulnerability management, cloud security, risk governance, and workflow automation.

Work with us as we protect the enterprise by strengthening how vulnerability risk...