Senior Exposure Management Analyst
Core
Support and enhance Bupa's Continuous Threat Exposure Management capability by identifying, assessing, prioritizing, and driving remediation of vulnerabilities and exposures across the technology estate.
Role type
Senior IC security analyst (vulnerability and exposure management)
Builds
Vulnerability management service, risk reduction outcomes, and security posture improvements
Domain
Cybersecurity / Cloud Security
Required skills
Vulnerability and exposure management, Cloud security, Risk-based prioritization, Stakeholder engagement, Mentoring, Data consolidation and normalization
Preferred skills
Security+ certification, CISSP, SSCP, GSEC, CySA+, ITIL, Cloud security certifications, Penetration testing knowledge, Breach and attack simulation knowledge
Technologies
Vulnerability scanning tools, Cloud platforms, CVE/CVSS frameworks, Threat intelligence platforms
Responsibilities
Operate and improve vulnerability scanning processes (authenticated/unauthenticated, agent deployment, coverage checks, validation). Consolidate security data into a single pane of glass for reporting and governance. Assess vulnerabilities in the context of business risk and regulatory requirements. Correlate and deduplicate findings from multiple sources (scanning, pentesting, Red Team, cloud). Drive remediation activity with technical and business teams. Provide guidance and mentoring to analysts. Prepare dashboards and evidence packs for leadership and risk forums.
Seniority
Senior, hands-on IC with mentoring responsibilities
