It & cybersecurity jobs in Atlanta, GA

About the role

The Cybersecurity Vulnerability Governance Analyst is responsible for governing and overseeing the organization's Vulnerability Management Program from a risk, compliance, and accountability perspective. This role serves as the bridge between Cybersecurity, IT Operations, Infrastructure, Cloud, Application Development, and business stakeholders to ensure vulnerabilities are appropriately evaluated, assigned, remediated, accepted , or escalated according to established policies and risk tolerance. This position does not perform engineering work and instead , the analyst is responsible for vulnerability governance, risk reporting, metrics, exception management, policy adherence, and executive-level visibility into the organization's vulnerability posture. Success in this role means establishing strong accountability across the organization for vulnerability remediation while providing clear visibility into cyber risk, remediation performance, and program effectiveness. The analyst enables informed risk decisions, supports regulatory compliance, and helps reduce organizational exposure by ensuring vulnerabilities are managed in accordance with enterprise risk expectations and security governance standards.

What you'll bring

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Risk Management, Business Administration, or a related field.
• 3+ years of experience in cybersecurity governance, risk management, compliance, audit, or vulnerability management.
• Knowledge of vulnerability management concepts, remediation workflows, vulnerability prioritization, and risk-based decision making.
• Understanding of cybersecurity frameworks and standards including NIST, CIS Controls, ISO 27001, and COBIT.
• Experience developing executive reporting, metrics, dashboards, and performance indicators.
• Strong analytical, communication, and stakeholder management skills.
• Ability to coordinate activities across technical and non-technical teams.
• 5+ years of experience supporting enterprise cybersecurity governance or vulnerability management programs.
• Experience with GRC platforms such as Archer, ServiceNow, MetricStream, or similar solutions.
• Familiarity with vulnerability management platforms including Tenable, Qualys, Rapid7, Wiz, or Microsoft Defender Vulnerability Management.
• Experience supporting regulatory compliance programs including SOX, HIPAA, NYDFS, PCI-DSS, SOC 2, or ISO certifications.
• CRISC

Benefits

Locations