Vulnerability & Patch Management Analyst

Description

The Vulnerability and Patch Management Analyst will play a pivotal role in establishing, maturing, and operationalizing our vulnerability and patch management programs. This individual will be responsible for identifying, assessing, tracking, and facilitating the remediation of security vulnerabilities across our IT infrastructure. A key focus of this role will be the development of robust processes, procedures, and clear Service Level Agreements (SLAs) with internal teams to ensure timely and effective remediation efforts.

Key Responsibilities:

• Design, develop, implement, and continuously improve vulnerability and patch management processes, procedures, and workflows from discovery to remediation and verification.

• Establish clear ownership and accountability for vulnerability remediation across different IT teams (e.g., Infrastructure, Applications, Security).

• Develop and implement a comprehensive patch management strategy, including a patching schedule, testing procedures, and rollback plans.

• Define and track key performance indicators (KPIs) and metrics for the vulnerability and patch management programs.

• Collaborate with various IT teams (e.g., system administrators, developers, network engineers, cloud operations) to define, negotiate, and establish realistic and effective Service Level Agreements (SLAs) for vulnerability remediation and patch deployment.

• Monitor adherence to established SLAs and report on compliance.

• Facilitate regular meetings with stakeholders to review SLA performance, discuss challenges, and identify areas for improvement.

• Manage vulnerability scanning software.

• Analyze scan results, identify false positives, prioritize vulnerabilities based on risk (CVSS score, exploitability, business impact), and communicate findings to relevant stakeholders.

• Track the status of identified vulnerabilities from discovery to closure, ensuring all remediation activities are documented.

• Research and understand new vulnerabilities, exploits, and attack vectors, providing recommendations for mitigation.

• Coordinate with IT operations teams to ensure timely and effective deployment of security patches and updates across all systems.

• Monitor patch deployment success rates and identify any failures or issues.

• Develop and maintain dashboards and reports illustrating the organization's vulnerability and patching posture.

• Act as a subject matter expert for vulnerability and patch management, providing guidance and support to other teams.