Sr IT Risk Technical Specialist Vulnerability Management

Location
Cincinnati , United States

Your job

Munich Re America Services (MRAS) is a shared service organization that delivers services to all Munich Re US P&C Companies and other group entities.

Vulnerability Management:

• Help lead global operations for Vulnerability Management technologies on the Global Endpoint Security service team, comprised of in-house resources, service provides and sass technologies.
• Understand threats to technology systems/services availability and methods to protect against loss of availability of services, outage and disruptions
• Supporting prevention topics like policy improvements, awareness support, threat and vulnerability mitigation
• Maintain operations of the technologies and fulfilment of Service Level Agreements (SLA).
• Perform the operations within the Munich Re global Vulnerability Management guidelines.
• Support and lead maturity in the suspension process’, reporting and tracking timelines.
• Work with operations on Vulnerability Management infrastructure maintenance maturity including automation
• Oversee the monitoring, identification and resolution of potential security incidents related to vulnerabilities through daily process’ like monitoring and analysis of detections, troubleshooting, supporting the customer, monitoring the infrastructure of the technologies
• Perform tasks like but not limited, incident support for detections, root cause analysis, process improvement, monitoring, work with technical administrators or developers to review findings
  • Help definition of the service strategy and the service design in alignment with global IT service manager and security architecture.
• Define all measures, methods and quality criteria which are necessary to deliver and manage the service and products.
• Identify and maintain the service and / or product owner responsible for remediation and request a plan of action with remediation timelines.

Your profile

Successful candidates will possess the following skills/capabilities:

• IT degree or equivalent combination of related work experience desired
• 3+ years of hands-on operations experience for a multinational organization in the Cyber Security field required
• Strong knowledge of complex IT organizations and experience with security-relevant topics, security technologies and a related knowledge of the market
• Scripting experience (PowerShell)
• Strong knowledge of Common Vulnerability Scoring System
• Strong knowledge of vulnerability identification and assessment technology
• Strong knowledge of risk management and countermeasures from recommendations
• Strong understanding of server, desktop and network operating systems (Windows, Linux and IOS)
• Knowledge of Active Directory
• Hands on experience with Tenable
• Hands on experience with ticketing systems like ServiceNow
• Prior security analysis experience is desired
• Experience in a Global company is required
• Strong planning, organizational and presentation skills
• Highly result oriented and structured
• An emphatic leader with and working with other technical team to explain technical challenges
• Ability to build teams and strong skills in the management of internal and external relationships, also extensive experience in an international context
• Very good command of English, both spoken and written

At Munich Re US, we see Diversity and Inclusion as a solution to the challenges and opportunities all around us. Our goal is to foster an inclusive culture and build a workforce that reflects the customers we serve and the communities in which we live and work. We strive to provide a workplace where all of our colleagues feel respected, valued and empowered to achieve their very best every day. We recruit and develop talent with a focus on providing our customers the most innovative products and services.

We are an equal opportunity employer. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

About us

Munich Re America Services, Inc. is a services provider to affiliated group companies primarily related to general services, procurement and IT services.