Threat and Vulnerability Management Associate
- Hiring from
- Ireland
- Work type
- Hybrid
- Posted
619,231 remote jobs, straight from company career pages
100% free · New jobs every minute
Show job descriptionHide job description
Who we are
United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning we provide exciting opportunities to work on a diverse range of projects and initiatives. We deliver a full suite of corporate finance products and solutions to our customers as well as investment banking and advisory services, and a range of innovative solutions in global capital markets. Read on to find out how you could enhance your skills and gain valuable experience, by joining us to support our clients transition to a sustainable future.
Role Summary
Is the next step in your career at SMBC Group EMEA? We’re looking for a Threat and Vulnerability Management Associate for our Cyber Resilience department to join our team.
You will help coordinate cyber resilience testing and vulnerability remediation across EMEA, including penetration testing, scanning and regulatory testing. You will work across the organisation to provide clear assurance, reporting and oversight of cyber risk.
Essentials of the role
-
Support penetration testing, vulnerability scanning and CBEST/DORA testing.
-
Monitor remediation activity and escalate material risks or delays, including through technical challenge, tracking and escalation.
-
Coordinate internal stakeholders, service owners and specialist suppliers.
Candidate requirements
- Practical experience in penetration testing or vulnerability management, including using penetration-testing or vulnerability-assessment tools and frameworks, and an understanding of NIST, ISO 27001, OWASP and cyber resilience regulation
- Strong analytical, reporting and stakeholder-management skills, including an ability to communicate complex technical risks clearly to technical and non-technical stakeholders.
- A relevant technical security certification or equivalent expertise.
Information Security and Technology Risk - Cyber Resilience
Position Description
Join SMBC Group EMEA’s Cyber Resilience team and help strengthen the Bank’s ability to identify, test and address cyber vulnerabilities. As a Threat and Vulnerability Management Associate, you will support penetration testing, vulnerability management and threat-led testing, including CBEST and DORA-related activities, while coordinating remediation and working with stakeholders across EMEA and global teams. You will also contribute to the development of testing frameworks and procedures, oversee third-party testing activity, track and escalate vulnerabilities, and translate technical findings into clear risk and governance reporting.
The purpose of this role is to:
- Assist in developing, maintaining, and implementing frameworks, policies, and procedures related to penetration testing, threat modelling, application security, and vulnerability management, ensuring alignment with regulatory requirements and industry best practices.
- Support the VP as a subject matter expert on cyber resilience and threat and vulnerability management, particularly in areas such as cloud security and third-party risk management.
- Coordinate the delivery of penetration testing, vulnerability scanning, and other cyber resilience testing activities, including managing third-party vendors and service providers, as well as internal service owners.
- Assist in the delivery of threat-led penetration testing activities, including CBEST and TIBER-EU, ensuring compliance with regulatory requirements such as DORA.
- Provide support in overseeing remediation of issues identified through testing activities.
- Maintain effective stakeholder relationships across various business units to ensure comprehensive and effective testing.
- Assist in reporting on metrics and escalating identified issues to management, clearly communicating progress and risks.
Knowledge, Skills and Experience
- Good knowledge and understanding of relevant frameworks such as NIST, ISO27001, OWASP.
- Formal security certifications required: Offensive Security Certified Professional (OSCP), CREST Certified Tester, CREST Practitioner Security Analyst, Cyber Scheme Test Member, GIAC, or appropriate equivalent.
- CompTIA Security+, CISM / CISSP / CRISC beneficial.
- Knowledge and understanding of regulatory requirements on cyber resilience testing, including DORA, BoE Operational Resilience, and CBEST.
- Knowledge, and experience, of penetration testing and vulnerability assessment tools, and penetration testing frameworks.
- Degree in computer science or similar, or equivalent work experience.
- Experience in delivering cyber resilience testing, including penetration testing within a regulated corporate environment, preferably Financial Services.
- Experience in managing a portfolio of security test projects, liaising closely with stakeholders to ensure delivery against objectives.
- Good stakeholder management, communication (both written and verbal), and influencing skills, with the ability to work independently or as part of a team, and communicate complex technical issues to a non-technical audience. This should include proven ability to produce high quality reporting.
- Strong analytical and problem-solving skills applied to complex technical problems, with excellent attention to detail.
- Ability to develop pragmatic and compliant solutions to cyber security issues.
- Experience in vulnerability management programmes, ideally within financial services, including delivery of remediation activities. This should include knowledge of the vulnerability management lifecycle.
- Knowledge of risk management practices.
- Applied knowledge of automation, and coding skills.
- Sysadmin experience desirable.
Competencies
What we offer
For all the expertise and experience you bring to help us make a difference, it’s only sustainable if we support you to build your career and be your best self so we offer competitive company benefits, centred around promoting positive well-bring and work-life balance. We also believe in fostering a diverse and inclusive work environment, where all team members perspectives and contributions are valued. Initiatives in place which promote a diverse and inclusive culture and healthy work life balance include hybrid working, Sport & Social Clubs and Diversity and Inclusion networks.
As an employee of SMBC you have access to a host of both useful and exciting benefit offerings. See below some of the benefits on offer to you:
- Hybrid and flexible working
- Competitive paid leave days
- Benefits to support your physical wellbeing, including private medical insurance and life and invalidity insurance
- Various policies to support your mental wellbeing, including a robust behavioural health network with counselling and coaching services
- Access a wide range of learning and development opportunities and career progression opportunities
- Ambitious remuneration package
So, if you like a challenge and want to continuously grow and develop in a role where you will be supported along the way by a dynamic and diverse team, apply today!!
About SMBC
A trusted partner for the long term
United by a sense of purpose towards our customers - to be a trusted partner for the long-term - and our universal banking platform in EMEA, we deliver a full suite of corporate finance products and solutions to our customers, including corporate, structured and trade finance, leveraged finance, loan market and treasury products. We can also provide investment banking and advisory services and a range of innovative solutions in global capital markets.
Find out more about what we do and who we are at https://www.smbcgroup.com/emea/careers
