Vulnerability & Patch Management Analyst (HYBRID, NYC)

Job Description

• Manage the full vulnerability and patch management lifecycle across infrastructure, systems, applications, and the SDLC, including identification, risk prioritization, tracking, remediation, and SLA-breach follow-up.
• Analyze cybersecurity event data, conduct vulnerability scans, assess system and infrastructure risk, and support vulnerability treatment and remediation.
• Develop leadership reporting, KPIs, KRIs, dashboards, and data analyses using SIEM tools, Power BI, advanced Excel, and Power Query.
• Design and maintain patch-management strategies, procedures, processes, playbooks, and runbooks while strengthening compliance with NIST, FFIEC, ISO 27001, NIST CSF, CIS, and security best practices.
• Requires a minimum of 5 years of relevant cybersecurity, vulnerability-management, or patch-management experience; a bachelor's degree or equivalent professional experience; hybrid work with 3 days onsite weekly in Midtown, NYC; and off-hours support as needed.