Senior Information Security Engineer Consultant

About the role

The Information Security Analyst is responsible for supporting customer and contractual security obligations related to vulnerability management. This role serves as the liaison between security teams, application owners, infrastructure teams, and customer-facing stakeholders to ensure vulnerabilities are tracked, remediated within required service levels, and documented appropriately for internal governance and external customer reporting purposes.

What you'll do

• Vulnerability Tracking & Governance Track identified vulnerabilities from discovery through remediation and closure
• Monitor remediation progress against internal policies, SLAs, customer contractual requirements, and regulatory obligations
• Review vulnerability exception requests and ensure appropriate documentation and approvals are obtained
• Escalate overdue vulnerabilities to appropriate management and stakeholders
• Validate remediation status and supporting evidence prior to closure

What you need

• 3–6 yrs of experience
• Vulnerability assessment
• Penetration testing
• ISO 27001
• Risk management
• Technical writing
• Root cause analysis
• Any graduate

Good to have

• CISSP
• CISM
• Git
• ServiceNow