Vulnerability Management Analyst

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

This is a hybrid role, requiring the successful candidate to attend our Tralee office at least two (2) days in a work week.

Role Description

SMBC is seeking a Vulnerability Management Analyst to join our Cyber Security team.

This role will support the identification, assessment and mangement of security vulnerabilities across the organisation.You will monitor vulnerability intelligence, escalate high-risk vulnerabilities, conduct

You will work closely with Cyber Security, Infrastructure and technology teams to investigate vulnerabilities, coordinate remediation activities and contribute to incident response and the continuous improvement of security controls.

This role reports to the Director of Vulnerability Management.

Role Objectives: Delivery

- Triage vulnerability alerts from security tools, external intelligence providers, penetration tests, and user-reported findings to assess impact to organization

- Configure network, infrastructure, and/or application vulnerability scans and policy checks and conduct manual testing as needed to validate findings

- Liaise with various business units to conduct vulnerability assessments, consult on risk reduction strategies, and supervise remediation such that vulnerabilities are addressed within required timelines

- Conduct attack surface risk modeling and articulate high-risk areas to stakeholders in collaboration with Threat Intelligence and Threat Hunting functions

- Assist in production of periodic vulnerability management reports and statistics for management.

- Tune vulnerability management tools to increase coverage, reduce false positives and false negatives, and improve processes

- Liaise with Optimization team to set up detections and mitigations i.e., Intrusion Prevention Systems, ensuring we have signatures in place to protect us from relevant threats.

- Support culture of continuous improvement by proactively investigating new risks and opportunities to strengthen Bank's security posture

- Work with Cyber Security, Infrastructure and technology teams to implement security improvements and remediate identified vulnerabilities.

- Review security processes and identify opportunities to strengthen controls and improve vulnerability management.

- Maintain security documentation, procedures and knowledge articles.

Qualifications and Skills

- 3+ years’ relevant experience across Vulnerability Management, Cyber Security, Information Security, Infrastructure or a related technical environment.

- Good understanding of vulnerability management principles including vulnerability identification, assessment, prioritisation and remediation.

- Understanding of network security concepts including firewalls, proxy servers, access controls and network traffic.

- Experience reviewing security alerts, logs or monitoring information to identify potential threats or vulnerabilities.

- Understanding of endpoint security technologies including anti-virus, malware protection and security monitoring solutions.

- Experience supporting vulnerability remediation or cyber security incident response activities.

- Good understanding of cyber security risks, security controls and common mitigation techniques.

- Strong troubleshooting, analytical and problem-solving skills.

- Ability to work effectively with Cyber Security, Infrastructure and technology teams to resolve security issues.

- Strong communication skills with the ability to explain security issues and recommended actions clearly to technical and non-technical stakeholders.

It would be an advantage if you have:

- Understanding of AI risks and security controls

- Ability to script tasks and automate processes

- Working knowledge of cloud technologies and containerized environments

- Experience within financial services or another regulated environment.

- Configuration Management experience

Additional Requirements

SMBC’s employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at [email protected].