Join EY and contribute to building a better working world. This role is integral to overseeing vulnerability management across our extensive infrastructure, applications, databases, and cloud environments. The focus is on proactively identifying, assessing, tracking, and remediating security vulnerabilities, ensuring robust compliance with cybersecurity policies, regulatory mandates, and internal risk standards.

Lead end-to-end vulnerability management for enterprise systems, analyzing scan results, and prioritizing vulnerabilities based on risk. Collaborate with various technical teams and vendors to drive remediation efforts, monitoring progress against SLAs. Prepare comprehensive reports and metrics for stakeholders, and support audits by providing evidence for control effectiveness. Ensure adherence to cybersecurity policies and regulatory requirements, managing exceptions and documenting risk acceptance. Act as an escalation point for critical vulnerabilities, contributing to a secure operational IT environment within an ITIL framework.

A minimum of 7 years of experience in application services or client/supplier relationship management within a technology setting is required. You should possess a strong understanding of vulnerability management, cybersecurity principles, CVSS scoring, CVE, and risk assessment methodologies. Experience with .NET applications, Microsoft Azure, SQL/Oracle databases, network security, cloud platforms, and application security is essential. Familiarity with IT lifecycle management and basic project management skills are also needed.