Medior IT Security Officer – Vulnerability Management

About the role

We are seeking a Medior IT Security Officer to join our First Line IT Security team. The role focuses on vulnerability management, risk assessment, and supporting broader cyber‑defense initiatives.

Key responsibilities

• Daily triage, risk‑based prioritisation and reporting of vulnerabilities.
• Coordinate remediation actions with IT teams and monitor progress.
• Prepare operational and management reports on security findings.
• Conduct cybersecurity risk assessments and support risk‑acceptance decisions.
• Assist in security incident analysis and follow‑up.
• Monitor threat feeds, security advisories and relevant CVE data.
• Contribute to security monitoring, hardening and cyber‑defense process improvements.
• Collaborate with internal security officers, IT teams and external suppliers.

Required profile

• Strong analytical and problem‑solving abilities.
• Excellent organisational and prioritisation skills.
• Clear communication with both technical and non‑technical stakeholders.
• Ability to work independently, drive actions to completion and stay calm under pressure.

Required skills

• Vulnerability Management processes (triage, prioritisation, remediation follow‑up, reporting).
• Experience with scanning tools such as Tenable or Qualys.
• Knowledge of CVE, CVSS, CWE, EPSS and CISA KEV.
• Cybersecurity risk assessment methodology.
• Security incident triage and investigation.
• SIEM, EDR/XDR and NDR technologies.
• Understanding of infrastructure, network, endpoint, application and cloud security.
• Security hardening, patch management and CIS Benchmarks.
• Security reporting, KPI/KRI development and dashboarding.
• Familiarity with NIST, ISO 27001/27002 and MITRE ATT&CK frameworks.