Senior Vulnerability Management Analyst

2 tygodni temu

Warszawa, Mazovia, Polska IQVIA Argentina Pełny etat

Location: Portugal, Poland, Brazil

Work model: Hybrid (1-2 days per week in the office)

This is one of a key cybersecurity role within the global Information Security organization.
The individual fulfilling this Information Security Manager role in Vulnerability Management team will partner closely with IT professionals both within the core Global Information Security organization and those in the Global Business Units performing assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy and management.

RESPONSIBILITIES

  • Delivering on a portfolio of tasks as part of Vulnerability Management Service
  • Supporting the Vulnerability Management team in vulnerability scanning and other ad hoc testing, identifying and evaluating vulnerabilities in web applications and infrastructure
  • Conducting comprehensive vulnerability assessments and continuous monitoring across IQVIA
  • Apply IQVIA's vulnerability ratings to externally rated vulnerabilities to help the business prioritize remediation
  • Support the business lead vulnerability remediation activities
  • Maintain an oversight of existing vulnerabilities in the IQVIA estate
  • Develop and document operational procedures and metrics in relation to carried out activities
  • Utilize information security technical safeguards and associated procedures, analyzing output and producing relevant management information reports for further improvements in the security safeguards landscape, including vulnerability assessment, threat intelligence and patching
  • Support audit efforts that identify technical and procedural findings, and provide recommended remediation strategies/solutions
  • Collaborate with the business, technology teams and information security management to ensure that control deficiencies are registered and remediated
  • Reporting regularly to management on the status of assigned activities including issues, risks and remediation actions.
  • Support and laisse on penetration testing activities for business units

All responsibilities are essential job functions unless noted as nonessential (N).

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES

  • Information system security management, information security, troubleshooting, information systems, quality assurance and control, network security, cyber threat modeling
  • Knowledge of computer networking concepts and protocols, and network security methodologies and OSI
  • Knowledge of industry tools for security scanning and vulnerability management solutions (Qualys, Tenable Nessus or Nexpose)
  • Working knowledge of enterprise IT and cloud technologies such as networking, server infrastructure, operating systems (MS Windows and Linux), web applications and databases
  • Working knowledge of cybersecurity principles, algorithms, protocols and technologies supporting encryption, authentication, access control, information systems attack patterns, intrusion detection, and network security
  • Knowledge of IT processes (ITIL) in regulated environments
  • Knowledge of ethical hacking principles and techniques, and Application Security Risks (eg. OWASP)
  • Excellent written and verbal communication skills
  • Effective organization and time management skills
  • Ability to write with purpose, clarity and accuracy
  • Ability to work both within a team environment and independently to initiate and prioritize tasks
  • Ability to establish and maintain effective working relationships with coworkers and management in a global environment.
  • Hands-on experience in security testing of web applications and infrastructure is a plus
  • Know-how of scripting languages is a plus
  • Experience in ServiceNow is a plus.

MINIMUM REQUIRED EDUCATION AND EXPERIENCE

  • Candidate should have a minimum of 3 years Vulnerability Management experience or 5 years prior experience in information assurance, incident handling, vulnerability management and vulnerability analysis, and assistance programs
  • Candidates should possess an Bachelor's degree in Computer science, cybersecurity, information technology, software engineering, information systems, computer engineering and preferably have experience within a regulated industry environment
  • An ITIL or project management certificates are not required but beneficial.
  • A relevant qualification: CompTIA Security, CASP+, CEH, GIAC (GSEC, GCED etc.), SSCP or similar is a plus.

IQVIA is a leading global provider of advanced analytics, technology solutions and clinical research services to the life sciences industry. We believe in pushing the boundaries of human science and data science to make the biggest impact possible – to help our customers create a healthier world. Learn more at


#J-18808-Ljbffr

  • Senior Security Vulnerability Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Sportradar Pełny etat

    Job DescriptionJob Description: All software and systems contain defects or vulnerabilities in them. This role is concerned with the management of vulnerabilities that are known about, so to ensure an effective remediation strategy is in place to avoid them being exploited by threat actors.The Senior Security Vulnerability Analyst role in Sportradar's Attack...

  • Senior Security Vulnerability Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Sportradar Pełny etat

    We're the world's leading sports technology company, at the intersection between sports, media, and betting. More than 1,700 sports federations, media outlets, betting operators, and consumer platforms across 120 countries rely on our know-how and technology to boost their business.Job DescriptionJob Description:All software and systems contain defects or...

  • Senior Vulnerability Management Specialist

    2 tygodni temu

    Warszawa, Mazovia, Polska ERGO Technology & Services S.A. Pełny etat

    Senior Vulnerability Management SpecialistYour responsibilitiesfacilitating and coordinating vulnerability assessment and scanninganalyzing assessment results and threat feeds to properly react to security weaknesses or vulnerabilitiescollaborating, coordinating, monitoring, and supporting activities in the areas of the VM programmaintaining control of...

  • Vulnerability Assessment Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Cyber Crime Pełny etat

    Aion Bank is a fully regulated European bank and credit institution that combines Vodeno's proprietary, private blockchain-based platform with its ECB banking license, balance sheet and regulatory and compliance expertise to offer a comprehensive suite of embedded banking products.Aion has a track record of delivering fully compliant embedded banking...

  • Senior Security Engineer, Vulnerability Detection

    2 tygodni temu

    Warszawa, Mazovia, Polska Google Pełny etat

    Senior Security Engineer, Vulnerability Detection Google Google's mission is to organize the world's information and make it universally accessible and useful. View company page Bachelor's degree in a technical field or equivalent practical experience.Experience in Vulnerability Detection.Experience in device, OS, or embedded system security.Experience in...

  • Software Vulnerability ML Engineer

    2 tygodni temu

    Warszawa, Mazovia, Polska Experis ManpowerGroup Sp. z o.o. Pełny etat

    The Software Vulnerability ML Engineer is responsible for improving analysis of possible software defects and vulnerabilities through the application of machine learning to complex applications using available security – relevant data.They should possess a solid background in ML and be experienced in data visualization for conveying analytic results to...

  • Senior Security Engineer, Vulnerability Detection

    2 tygodni temu

    Warszawa, Mazovia, Polska Google Inc. Pełny etat

    Senior Security Engineer, Vulnerability Detection corporate_fare Google place Warsaw, Poland Apply Bachelor's degree in a technical field or equivalent practical experience.Experience in Vulnerability Detection.Experience in device, OS, or embedded system security.Experience in C/C++ source code security analysis.Preferred qualifications:Experience with...

  • Cybersecurity Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Plazotechnologies Pełny etat

    Plazo Technologies is a successful IT company specializing in credit scoring, Data Science and financial digital technologies. And we invite Cybersecurity analyst to become part of our companyPRIMARY RESPONSIBILITIESMonitor and analyze the event correlation and incident data to identify trends, false positives, and provide enhancements where necessary to...

  • Workforce Management Senior Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Randstad Polska Sp. z o.o. Pełny etat

    Together with our client, a world-known company, we are building a new contact center in WarsawIf you have experience in collecting and analyzing large amounts of data to enable visualization, insights, data-driven decision-making within the Customer Service Team and you are looking for an opportunity to develop your career in a dynamic, international...

  • F&A - Senior Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Duracell Pełny etat

    We are looking for a Senior Financial AnalystWe are seeking a Senior Financial Analyst who will serve as the lead analyst for one of our segments (group of countries).Responsibilities:Leading financial planning and month-end closure activitiesConducting periodic managerial reportingValidating compliance of Trade Fund Management ProcessDeveloping commercial...

  • Technology & Cyber Risk: Senior Analyst - Cybersecurity Risk

    2 tygodni temu

    Warszawa, Mazovia, Polska 11101 Citibank Europe plc Poland Pełny etat

    Come and join our newly established Cyber Risk Team in WarsawThe Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm's reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report, and manage operational and compliance risks while promoting the...

  • Senior IT Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Belmontlavan Pełny etat

    We are seeking a Senior IT Analyst to join our dynamic team at Belmont Lavan Ltd. As a Senior IT Analyst, you will play a crucial role in analyzing and improving our IT systems and processes. You will work closely with stakeholders to identify business needs, gather requirements, and propose effective IT solutions.In this hybrid role, you will have both...

  • Senior IT Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Belmont Lavan Ltd Pełny etat

    We are seeking a Senior IT Analyst to join our dynamic team at Belmont Lavan Ltd. As a Senior IT Analyst, you will play a crucial role in analyzing and improving our IT systems and processes. You will work closely with stakeholders to identify business needs, gather requirements, and propose effective IT solutions.In this hybrid role, you will have both...

  • Senior Business Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Randstad Polska Sp. z o.o. Pełny etat

    For a client in the banking industry, we are looking for a person to fill the position of Senior Business AnalystThe successful candidate will join the Data & Technology team within the Enterprise Risk Managementorganisation. Their primary focus will be to work on the Enterprise Product Taxonomy (EPT) programme.Senior Business AnalystNr ref: Warszawa...

  • Senior Financial Analyst

    2 miesięcy temu

    Warszawa, Mazovia, Polska NatWest Polska Pełny etat

    Join us as a Senior Financial AnalystThis is an opportunity to support the delivery of end-to-end financial control activity With significant exposure, you'll enjoy networking with senior stakeholders across Finance Gain valuable experience and hone your expertise as you advance your career in this challenging roleWhat you'll do As Senior Financial Analyst,...

  • Security Engineer, Vulnerability Detection

    2 tygodni temu

    Warszawa, Mazovia, Polska Google Pełny etat

    Security Engineer, Vulnerability Detection Google Google's mission is to organize the world's information and make it universally accessible and useful. View company page Bachelor's degree in a technical field (e.g., Cyber Security, Computer Science) or equivalent practical experienceExperience in C/C++ source code security analysisExperience coding in one...

  • Invoice to Cash Senior Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Stryker Corporation Pełny etat

    Invoice to Cash Senior Analyst page is loaded Invoice to Cash Senior Analyst Apply locations Warsaw, Poland time type Full time posted on Posted 6 Days Ago job requisition id R522252 Work Flexibility: Hybrid Position summary: I2C Senior Analyst will play a key role within Front Office team, reporting directly to Associate Manager. The person in this...

  • Senior Business Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska ITMAGINATION Pełny etat

    Senior Business Analyst Warsaw, Masovian Voivodeship Senior Business Analyst Warszawa Warsaw, Masovian Voivodeship, Polska ITMAGINATIONhelps its Clients by becoming a true extension of their software and data development capabilities. Through the readily set up, comprehensive, and self-governing teams, we let our Clients focus on their business while we make...

  • Senior Sales Analyst

    2 tygodni temu

    Warszawa, Mazovia, Polska Fyte Pełny etat

    Position: Senior Sales AnalystLocation: Warsaw Working Model: Hybrid Responsibilities:Preparing customer-specific material for annual negotiations or customer visits, incl. data collection from internal databases like SAP , Nielsen etc.)Delivering continuous customer analysis, KPI reporting, and customer scorecardsDeveloping, maintaining, and improving...

  • Senior Sales Analyst

    4 tygodni temu

    Warszawa, Mazovia, Polska Fyte Pełny etat

    Position: Senior Sales AnalystLocation: Warsaw Working Model: Hybrid Responsibilities:Preparing customer-specific material for annual negotiations or customer visits, incl. data collection from internal databases like SAP , Nielsen etc.)Delivering continuous customer analysis, KPI reporting, and customer scorecardsDeveloping, maintaining, and improving...