Vulnerability & Patch Management Analyst – Cyber Security Analyst

As the founding entity of RAINBOW PARTNERS, Quanteam is a consulting firm specialized in Banking, Finance, and Financial Services. Through our core human values – proximity, teamwork, diversity, excellence – our 1000 expert consultants, hailing from 35 different nationalities, collaborate across 13 international offices: Paris, Lyon, New York, Montreal, London, Brussels, Luxembourg, Geneva, Lisbon, Porto, Casablanca, Madrid and Singapore.

Increase your chances of an interview by reading the following overview of this role before making an application.
Quanteam North America is looking for a Vulnerability & Patch Management Analyst to join the IT Security team of a leading Corporate & Investment Bank in New York. You will own and modernize the Americas vulnerability and patch management program, working hand in hand with IT teams in the US
What you will doDrive the full vulnerability lifecycle across infrastructure, systems, applications and SDLC: identification, prioritization, remediationRun scans, treatment and remediation with enterprise vulnerability tools, and track Plans of Action & Milestones (POA&M)Prioritize patch deployments, manage SLA breaches and execute follow-up plans with IT ownersBuild SIEM dashboards and deliver clear KPI/KRI reporting to leadership (Power BI, Excel / Power Query)Design and improve VPM procedures, playbooks and runbooksWork with the Second Line of Defense and auditors on compliance and audit remediationUse scripting and AI to automate manual processesProvide backup on cybersecurity projects and incidents, including off-hours support when emergent threats require it
What you bring5 to 9 years in vulnerability management, patch management or a related security roleHands-on experience with a vulnerability scanning tool (Qualys, Tenable, Rapid7 or similar)SIEM experience, including building dashboards and reports (Splunk, QRadar, Sentinel or similar)Strong reporting skills: Power BI, advanced Excel, Power Query, pivot tables xzbcwsv Scripting experience (PowerShell, Python or similar)Solid knowledge of NIST CSF, FFIEC, ISO 27001 and CIS frameworksGood understanding of networks (TCP/IP, protocols), Windows, Linux/Unix and VMwareAbility to present to management and work with cross-functional, international teamsBachelor’s degree in Information Security, Computer Science or a related field, or equivalent experienceCISSP, CISM, GCIH, GCIA or GPEN is a plus
DetailsLocation: Midtown Manhattan, hybrid (3 days per week on-site)Contract: long-term, immediate startEligibility: W2 only, no C2C