JPC-232432 - Vulnerability Management Operations Analayst
Job Posted: May 14, 2024 | Total views: 1

Job Description:

• Job Description

  TOOLING OPERATIONAL MANAGEMENT

  Vulnerability Consolidation Platform

  · Uplifting the VCP to consider the increase in additional security weaknesses through improved scanning capabilities

  · Ensuring all vulnerability data feeds are functioning as per design and that new data feeds remain on track for delivery into production.

  · Reviewing compliance reports (which summarise the number of days given to remediation owner), identifying if any of the timescales look incorrect and implementing corrective actions.

  · Monitoring Vulnerability Consolidation platform to ensure that all down/upstream operational systems utilising data can consume it. Escalating any identified issues to management.

  · Managing User access and associated user administration.

  · Creating dashboards on the Vulnerability Consolidation Platform.

  Central Planning Platform

  · Monitoring all operational processes and tooling to ensure any issues are identified, reported on and tracked to resolution.

  · Monitoring the health of the interlinked environments that update the central planning platform, including escalating any failures that occur in the process, and taking action to resolve. Note. This may require holding meetings to liaise with the inte
  al engineering team.

   

  REPORTING

  · Production of routine operational reports by exporting data from existing sources (including Power BI dashboards, Cyberport and Cyberflows).

  · Reviewing automated reports for data variances and creating/ implementing action plans to resolve identified issues. Escalating issues when required.

  · Ensure clear and concise senior management reporting.

   

  KEY PARTNER ENGAGEMENT

  · Interfacing with Cyclical Patching teams/ interlinked control areas to help drive remediation planning and ‘Path to Green’ discussions, to ensure vulnerability remediation remains compliant with SLAs.

  · Collaborating with the CTO team, who are responsible for the global demise/ decommissioning process (of server, cloud, website, DNS), to prioritise time sensitive decommissions, ensuring these are successfully completed and supported by the relevant vulnerability remediation’s.

   

  EVERGREENING

  · Guaranteeing that all open vulnerabilities arising from evergreening activities are clearly identified, prioritised, and reported on, through collaboration with the SWAT team.

  · Managing and continuously developing the relationship between the VM and Evergreening (SSP) teams.

   

  MEETING MANAGEMENT

  · Administration and management of meetings including planning/executing the agenda, monitoring attendance and recording/ tracking the actions.

   

  GENERAL

  · Adhoc tasks as required, including support to other operational and gove
  ance activities within CSAT.

  · Ensuring HSBC values and ‘tone of voice’ are maintained across all communication content and channels.

   

  To be successful in this role, you should meet the following requirements:

  · Understanding of the Vulnerability Management lifecycle (including scanning and assessment approaches) and Patch management.

  · Expert usage of Microsoft Excel, including the ability to create and understand Pivot tables and manipulate large data sets.

  · Aptitude to lea
  how to export data from existing systems/ applications.

  · Experience of identifying issues and tracking them to conclusion.

  · Excellent organisational, administrative, analytical and data management skills, with the ability to work accurately and methodically whilst under pressure to meet deadlines.

  · Excellent written and oral communication skills, including the ability to work on reports/ presentations for senior management, and present to large audiences.

  · Experience of influencing, challenging and managing stakeholders.

  · Strong interpersonal skills with the ability to build effective working relationships with colleagues and work well as part of a team.

  · Pro-active, independent individual with a positive attitude who is able to work remotely.

  · Understanding of Microsoft Teams and Confluence.

   

About Company :
Purview is a leading Digital Cloud & Data Engineering company headquartered in Edinburgh, United Kingdom having a presence in 14 countries India (Hyderabad, Bangalore, Chennai and Pune), Poland, Germany, Finland, Netherlands, Ireland, USA, UAE, Oman, Singapore, Hong Kong, Malaysia and Australia.

We have a strong presence in UK, Europe and APEC, providing services to Captive Clients (HSBC, NatWest, Northern Trust, IDFC First Bank, Nordia Bank etc) in fully managed solutions and co-managed capacity models. Also, we support various top IT tier 1 organisations (Capgemini, Deloitte, Wipro, Virtusa, L&T, CoForge, TechM and more) to deliver solutions and workforce/resources.

Company Info: