IT Security Officer (Vulnerability & Risk Management) (Ref 26589)

Responsibilities Vulnerability Management

• Execute and manage regular vulnerability scans across on-premises infrastructure and AWS services (EC2, S3, RDS, and other relevant services)

• Generate, review, and distribute vulnerability scan reports to relevant technical teams and leadership

• Follow up with Subject Matter Experts (SMEs) on outstanding vulnerability findings to ensure timely remediation or documented exceptions

• Track remediation status and escalate overdue items per defined SLAs Risk Register & Risk Acceptance

• Own and maintain the organization's Risk Register, ensuring it reflects current, accurate risk data

• Draft Risk Acceptance forms for identified risks that cannot be immediately remediated

• Coordinate with business and technical stakeholders to review, negotiate, and obtain formal approval/sign-off on risk acceptances

• Periodically review accepted risks for continued validity and reassessment Security Operations Oversight

• Monitor and verify that security signature updates (AV/EDR, IDS/IPS, etc.) are applied consistently across the environment

• Review vendor security bulletins and vulnerability notifications to determine applicability to the customer's environment

• Ensure timely triage and action on vendor-disclosed vulnerabilities affecting in-scope systems Impact & Risk Analysis

• Perform impact analysis on identified vulnerabilities using CVSS (Common Vulnerability Scoring System) scores

• Contextualise CVSS base scores against the actual environment (asset criticality, exposure, compensating controls) to determine real-world risk and prioritisation

• Provide risk-based recommendations to stakeholders to support remediation prioritization decisions Reporting & Communication

• Prepare periodic status reports/dashboards on vulnerability management, risk register status, and outstanding risk acceptances for leadership review

• Communicate effectively with technical SMEs, business stakeholders, and management across varying levels of tec