Sr Risk And Vulnerability Analyst Jobs in Madison, WI

At TruStage, we're on a mission to make a brighter financial future accessible to everyone. We put people first, and work hand in hand with employees and customers to create a diverse and inclusive environment. Passionate about building insurance and financial services solutions, we push the boundaries of what's possible. We need you to help us shape what's next. You'll be encouraged to share your experiences, ideas and skills to help others take control of their financial future.

Join a team that has received numerous awards for being a top place to work: TruStage awards and recognition

Job Responsibilities:

Vulnerability Management Strategy & Governance

• Lead the development, implementation, and refinement of IT's vulnerability management strategy and remediation processes.
• Establish and manage governance frameworks to ensure accountability, consistency, and transparency in IT's vulnerability remediation activities.

Vulnerability Identification & Assessment

• Oversee the continuous identification of vulnerabilities across IT assets, including software, hardware, cloud environments, and third-party services.
• Ensure regular vulnerability assessments and scans are conducted, including penetration tests.
• Collaborate with Information Security's Threat Intel team to understand emerging vulnerabilities, zero-day threats, and high-risk exposures.

Collaboration & Reporting

• Coordinate with relevant stakeholders to ensure remediation efforts are focused on the highest-priority vulnerabilities.
• Collaborate with IT Operations and DevOps teams to implement solutions and ensure timely resolution of vulnerabilities.
• Track and report on remediation progress, identifying roadblocks and implementing corrective actions where necessary.

Remediation & Mitigation

• Serve as the primary point of contact for all vulnerability remediation-related issues.
• Develop and distribute regular reports to senior leadership, outlining vulnerability trends, remediation status, and risk mitigation efforts.
• Maintain clear communication with internal stakeholders to keep them informed about vulnerability-related threats and remediation efforts.

Continuous Improvement & Process Optimization

• Continuously evaluate and optimize the vulnerability remediation process, incorporating lessons learned from past remediation cycles and industry best practices.
• Lead efforts to improve the efficiency and effectiveness of vulnerability scanning, tracking, and reporting tools and systems.

Training & Awareness

• Develop and deliver training materials to technical teams on effective vulnerability identification and remediation.
• Foster collaboration between teams to ensure vulnerability management practices are understood and adhered to throughout the organization.

The above statement of duties is not intended to be all inclusive and other duties will be assigned from time to time.

Job Requirements:

• Bachelor's degree in computer science, information technology, cybersecurity, or related field, or equivalent combination of education and/or related professional work experience.
• 5+ years of experience in IT, information security, vulnerability management, risk management, or related roles.
• Demonstrated experience designing, owning, or governing enterpriselevel IT or security processes.
• Strong understanding of vulnerability management concepts, including identification, assessment, remediation, and mitigation.
• Handson knowledge of vulnerability scanning, assessment, and penetration testing practices and tools.
• Understanding of regulatory, compliance, and risk management requirements related to cybersecurity and IT operations.
• Strong process optimization mindset with experience applying lessons learned and industry best practices.
• Demonstrated ability to collaborate effectively with multiple leadership levels and across teams and functions.
• Excellent written and verbal communication skills, including the ability to explain technical risks and remediation status to nontechnical audiences.
• Strong analytical and reporting skills, with experience tracking remediation progress and vulnerability trends.
• Ability to identify remediation roadblocks, recommend corrective actions, and escalate risks appropriately.

#LI-SW

If you're ready to help make a difference, apply today. A resume is required to apply. TruStage may process applicant information using an Artificial Intelligence (AI) tool. This tool automatically generates a screening score based on how well applicant information matches the requirements and qualifications for the position. TruStage recruiters use the screening score as a guide to further evaluate candidates; the score is one component of an application review and does not automatically determine whether a candidate moves forward. Candidates may choose to opt out of this process.

Compensation may vary based on the job level, your geographic work location, position incentive plan and exemption status.

Base Salary Range:

At TruStage, we believe a sound, inclusive benefits program is of vital importance, along with a flexible workplace that allows for work-life balance, career growth and retirement assistance. In addition to your base pay, your position may be eligible for an annual incentive (bonus) plan. Additional benefits available to eligible employees include medical, dental, vision, employee assistance program, life insurance, disability plans, parental leave, paid time off, 401k, and tuition reimbursement, just to name a few. Beyond pay and benefits, we also recognize that flexibility, including working in a place you prefer, is essential to caring for our employees. We will continue to strive to offer flexibility and invest in technology and other tools that will make hybrid working normal rather than an exception, so that when "life happens," you can focus on what's most important.

Accommodation request

TruStage is a place where everyone can bring their best self and thrive. If you need application or interview process accommodations, please contact the accessibility department.