Consultant-VM

• Minimum 4-7 years relevant experience in a similar vulnerability management analyst role;
• Understanding of the tooling associated with vulnerability management.
• Experience and knowledge in vulnerability management of applications and infrastructure within the Cloud, such as AWS and Azure;
• Experience and knowledge in vulnerability management of container or serverless platforms;
• Experience of successfully working in a fast paced, customer service environment, delivering high quality information security services)

Responsibilities
§ Work collaboratively with internal stakeholders to perform risk based technical assessments on technical vulnerabilities;
§ Provide vulnerability remediation prioritization recommendations to internal stakeholders;
§ Maintain good relationships with internal stakeholders and ensure customer satisfaction, by delivering quality service and escalation issues as necessary;
§ Influence colleagues to drive vulnerability remediation in a collaborative manner to help achieve operational and strategic targets;
§ Perform review of any exception requests related to technical vulnerabilities, providing recommendations and documenting findings and actions;
§ Identify and drive vulnerability management service improvements, especially through the use of automation.
§ Collate and analyze data from internal stakeholders on technical vulnerabilities to support any information requests from leadership and or KPMG clients;
§ Support configuration and reporting requests within vulnerability management technology;
§ Work with vulnerability management technology vendors to support any vulnerability management activities;
§ Attend and support internal and external audits from a vulnerability management service perspective;
§ Support investigations and resolutions of security problems to find a root cause and find a balanced outcome;
§ Provide analysis on trends and proactively highlight issues and areas of concern;

Qualifications
§ scanning
§ Experience of Industry standard Vulnerability Management tooling such as such as Qualys, Tenable, Microsoft Defender ATP and ServiceNow; Experience of other industry leading Risk based vulnerability management tooling, such as Kenna Security or other security related vulnerability management platforms.