Senior Cybersecurity & Vulnerability Management Consultant

Quick Facts

• Role: Senior Cybersecurity & Vulnerability Management Consultant (contract-to-perm)

• Work model: Hybrid (3 days onsite per week; potentially 4)

Description

Support the U.S. Cybersecurity Program within a major financial institution under the Office of the U.S. Chief Information Security Officer. The role combines hands-on technical cybersecurity expertise with cyber risk management, security governance, and issue remediation, with an emphasis on Vulnerability Management.

Responsibilities

• Lead vulnerability management oversight: partner with technology owners to assess vulnerabilities, remediation strategies, patching processes, and sustainable risk mitigation.

• Review cybersecurity and technology issues, challenge management action plans, and drive remediation through successful closure.

• Provide technical guidance across infrastructure and security domains (system configurations, patching, IAM, cloud technologies, automation, orchestration, golden images).

• Oversee security control activities, especially within Vulnerability Management and Identity & Access Management.

• Lead quarterly application inventory reviews with application owners to validate system usage, configurations, ownership, and change management practices.

• Support Application Portfolio Management governance to ensure accurate technology classification and inventory information.

• Partner with Control Owners, Quality Assurance, second-line Risk, and Internal Audit to address findings and validate control effectiveness.

• Collaborate with U.S. and global cybersecurity, infrastructure, application, and business stakeholders.

• Provide technical cybersecurity expertise to support regulatory and internal risk management initiatives.

Requirements

• 10+ years of experience in Information Technology, Cybersecurity, or Cyber Risk.

• Strong hands-on knowledge of vulnerability management practices (assessment, prioritization, remediation, validation).

• 3+ years of experience in systems architecture and operations (system configurations, patch management, IAM, automation, orchestration, golden images, and/or cloud infrastructure).

• Experience with cybersecurity risk management, security controls, issue remediation, and technology governance.

• Ability to evaluate technical security issues and develop sustainable remediation solutions with infrastructure and application teams.

• Strong analytical, problem-solving, communication, and stakeholder management skills.

• Ability to work independently and collaborate across technical, risk, and business teams.

Benefits

• Contract-to-perm opportunity.

• Hybrid work model (3 days onsite per week; potentially 4 days based on business needs).