Vulnerability Management Analyst

We are seeking a skilled and experienced cybersecurity analyst in the area of vulnerability management to join our Security Operations team reporting to Manager, Security Operations.

Your role will involve organize and oversee penetration testing, coordinating remediation efforts, conducting vulnerability scans, and preparing detailed security reports. You will have a strong technical background in vulnerability management and a strategic mindset for improving security processes.

Location: You will be based in our Toronto office and will work in a Hybrid model.

Reporting Relationship: You will report to the Manager, Security Operations.

• Organize and manage third-party penetration testing efforts, ensuring proper scoping, scheduling, execution, and review of findings.
• Partner with multiple teams across the organization and 3rd party service provider to map, track, monitor and communicate progress on remediation activities.
• Create and present vulnerability reports for partners, providing insights and recommendations for improved security practices.
• Recommend and implement automation techniques to enhance vulnerability scanning and remediation processes.
• Be a subject matter expert and advise other members of the organization on the best practices that should be followed in vulnerability and risk management.
• Identify gaps and support action plans to strengthen Vulnerability Management control efficiency.

• Bachelor's degree in Cybersecurity, or equivalent work experience
• 3+ years of proven professional experience in Cyber Security and Vulnerability Management
• Familiarity with vulnerability assessment platforms (e.g., Rapid7 Insight VM, Nessus, Qualys and others)
• Familiarity with vulnerability management standards (e.g., NVD, CVE, CVSS, CWE, OWASP and others)
• Strong communication skills to interface with stakeholders and management
• Team player, adaptable, and willing to take on new challenges and learn new technologies
• Knowledge of security controls/mechanisms and threat/risk assessment techniques.

• Comprehensive Total Rewards Program including bonuses, flexible benefits starting from day 1, and your choice of either a health spending account (HSA) or personal spending account (PSA)
• RRSP matching & defined contribution pension plan
• Learning & development programs and resources including unlimited free access to Coursera and an Educational Assistance Program
• Holistic approach to your well-being, with an Employee Assistance Program for you and your family, access to 24/7 virtual health care, wellness events and a supportive workplace culture
• A workplace committed to investing in Diversity, Equity and Inclusion (DEI) through various initiatives including, employee inclusion groups (EIGs), mentorship, DEI learning and workshops, educational events, and various resources including an internal DEI website and newsletter
• Company-wide paid year-end closure & personal time off (including religious, personal, and volunteer days)

Find out more about the work perks and benefits you get as a Moneris employee at Moneris.com/careers

#LI-Hybrid

#TECH-IND

Note: We welcome and encourage applications from Indigenous peoples, people of colour, people with disabilities, people of all genders, sexual orientation and intersectional identities.

We acknowledge that people from equity-deserving groups (including racialized individuals, women, gender diverse individuals, individuals with disabilities, neurodivergent individuals, members of 2SLGBTQIA+ communities and those born outside of Canada) are less likely to apply for jobs unless they feel they meet all the requirements posted. At Moneris, we believe candidates bring experience to their work in many ways. We encourage you to apply and share, in the application form, the transferrable experience you bring, and how this will support your success in this role.