IT Security Asset & Vulnerability Management Specialist

Purpose: To ensure complete, accurate, and up-to-date visibility of the group's IT security exposure (technical vulnerabilities identified through recurrent scans) and IT assets (hardware, software, services), by administering Tenable scanning processes, maintaining the CMDB (Configuration Management Database) and the asset inventory, as well as coordinating vulnerability remediation with infrastructure and application teams.

The role directly supports the fulfillment of DORA obligations regarding ICT asset inventory and risk assessment of legacy systems, as well as reducing cyber exposure at the VIGRO Group level.

Requirements:

• Completed higher education studies, preferably in IT, cybersecurity, or related fields;

• Minimum 3-5 years of experience in IT security, infrastructure administration, or IT Service Management;

• Demonstrated experience in using vulnerability management platforms;

• Experience in administering or using a CMDB/ITSM;

• Practical knowledge of IT infrastructure (networks, Windows/Linux operating systems, virtualization, cloud);

• Knowledge of Active Directory, virtualization (VMware/Hyper-V) and cloud environments (Azure/AWS) for inventory and discovery;

• CVSS v3.x and vulnerability prioritization methodologies;

• Knowledge of scripting (PowerShell, Python, or Bash) for automating reports and reconciliations;

• Advanced use of Excel/reporting tools (Power BI is an advantage);

• Relevant certifications such as Tenable Certified (Nessus/Tenable.sc), CompTIA Security+, Certified Ethical Hacker (CEH), ITIL Foundation, CISA, or CISSP (obtained or in progress) - are an advantage:

• Experience in regulated environments (financial institutions/insurance) is an advantage;

• Advanced English level;

• Analytical and prioritization skills in high-volume data conditions;

• Clear communication with technical teams and management;

• Proactivity in identifying and escalating risks;

• Teamwork and inter-departmental coordination skills;

• Results-oriented and commitment to deadlines.

Responsibilities:

• Ensure complete, accurate, and up-to-date visibility of the group's IT security exposure and IT assets (hardware, software, and services), by administering vulnerability scanning processes, maintaining the CMDB and the IT asset inventory;

• Plan, configure, and execute recurrent vulnerability scans using dedicated platforms (Tenable/Nessus or equivalent), analyze and prioritize identified vulnerabilities, coordinate the remediation process with infrastructure and application teams, and validate the implementation of corrective measures;

• Administer and maintain the CMDB (Configuration Management Database) at the group level (defining and maintaining the data model, configuration item types, attributes, relationships between CIs), ensuring the accuracy, completeness, and permanent updating of information regarding IT assets and their relationships, by reconciling data from various monitoring and discovery systems and tools;

• Manage the IT asset inventory and contribute to the administration of their lifecycle, including identifying legacy systems and those at the end of their support period, in order to reduce operational and Security risks;

• Develop periodic reports, performance indicators, and dashboards on the status of vulnerabilities, scan coverage, CMDB data quality, and asset inventory, providing relevant information for management and decision-making processes;

• Collaborate with Infrastructure, Applications, IT Procurement teams, and system owners to manage technological risks, continuously improve processes, and maintain a high level of compliance and Security;

• Support the fulfillment of IT governance and compliance requirements, including DORA obligations regarding ICT asset inventory and risk assessment associated with IT systems.

What we offer:

• An office in the city center;

• Challenges in a dynamic yet safe, stable, and friendly environment;

• Hybrid work schedule: up to 15 WFH days available;

• Competitive benefits package.

The diversity of our people plays a major role in our success. We are committed to promoting diversity in the workplace and are proud to offer fair opportunities to everyone. We use our experience, we know how to approach our clients. Regardless of professional and personal experience, we are looking for candidates who have the courage and dedication to play a role in our development and add value to our culture. We work hard, but we believe in collaboration, growth, and responsibility.

A position at VIG opens up a series of excellent development prospects for university graduates and professionals with specialized expertise.