Threat & Vulnerability Mgmt - Threat & Vulnerability Management Analyst I

American National•League City, TX

17h

About The Position

The purpose of this position is to administer accounts, troubleshoot, and maintain end user functionality of applications used by the enterprise threat and vulnerability management program, act as a conduit for communications related to vulnerability intelligence and remediation efforts, track remediation efforts and outcomes, and to fill the role of project lead on remediations when needed.

Requirements

Bachelor's degree.
Two to four years of experience.
Above-average communication skills, both verbal and written.
General knowledge of insurance concepts.
Mental agility, attention to detail, creativity, and innovative thinking.
Demonstrated problem-solving and analytical skills.
Willingness to interact with people from various job-related backgrounds at all levels of experience, both within and outside the company.
Ability to work independently and to be an effective team member.
Possess an understanding of the concepts of confidentiality, integrity, and prioritization strategy.

Nice To Haves

Additional years of professional experience may be considered in lieu of a Bachelor’s degree.
Three or more years of experience with vulnerability management or risk remediation efforts.

Responsibilities

Account administrator for enterprise vulnerability management tools, monitors contract renewal dates and assists with renewal process.
Maintenance and monitoring of current remediation effort logs, to include follow up on unapplied remediation recommendations outside of SLAs.
Tracks patch issue logs, and reports on status.
Serves as Vulnerability Management Team liaison as assigned, assisting with making sure CVE lists and other mitigating configurations are up to date and monitoring and reporting on remediation efforts.
Responsible for enforcing the enterprise’s controls for the systems the team administers.
Provide audit support in the form of timely responses to GRC, IA, and regulatory body inquiries as required.
Works the team’s group inbox in adherence with Service Level Agreements - sends initial CVE (Common Vulnerabilities and Exposures) Intel to remediations teams, replies, and directs email traffic to appropriate team members.
Collaborate with teams on change management process when needed.
Maintains documentation supporting the standard operating procedures for the team.
Produce and deliver routine reports as needed.