Cyber Threat and Vulnerability Analyst

About the role

The CTV Analyst will assist the Manager in supporting the planning, execution, and monitoring of Cyber Threat & Vulnerability Management (CTVM) program. This role involves performing and managing vulnerability scans, coordinating remediation efforts, proactively monitoring threats, maintaining asset inventories in collaboration with IT, and supporting cybersecurity governance and compliance initiatives.

Key responsibilities

• Assist the Manager in planning, analyzing, developing frameworks, and deploying the CTVM program
• Support daily operations, including coordination VAPT exercises with vendors, performing on-demand internal and external vulnerability scans, scheduling, prioritization, and remediation tracking
• Maintain a current and comprehensive inventory of all IT hardware, software, and cloud assets within the organization in collaboration with IT
• Assist in identifying vulnerabilities and supporting remediation plans, including patching, code or infrastructure changes, and build process updates
• Assist in implementing cybersecurity and IT security policies to ensure compliance with internal and regulatory standards
• Support the development of policies, procedures, and standard operating models for the CTVM program
• Assist on KPIs and KRIs for cybersecurity operations and maintain technical and management dashboards
• Provide technical support and advisory services to stakeholders to ensure enterprise-wide cyber resilience
• Support security monitoring activities in collaboration with vendors and coordinate remediation efforts with internal IT team
• Stay up to date on emerging cyber threats, vulnerabilities, and IT security trends relevant to the organization and industry

About you

• Minimum Bachelor's Degree or Equivalent with specialization in Computer Science / IT Security / Cyber Security
• Min 5 years of working experience in IT or Cyber Security domains specifically in cyber threat and vulnerability management, or Security Operations Center (SOC)
• Basic understanding of IT infrastructure, networking, and cybersecurity principles
• Familiarity with vulnerability assessment, patch management, and security monitoring tools
• Familiar with ServiceNow and Jira for ticketing and workflow management
• Familiar with security tools such as Nessus Professional, CrowdStrike Falcon Complete, MDR solutions, Identity Threat Protection (ITP) and Burp Suite
• Strong analytical, problem-solving, and organizational skills
• Good communication and teamwork abilities
• Exposure to AWS native security tools is a plus
• Any relevant cyber and vulnerability management tool or solution certification, or CEH, ITIL, CISA, EC-Council or equivalent are advantageous