Description

You manage vulnerability scanning programs and drive compliance initiatives toward ISO 27002 and PCI standards.

Responsibilities

• Schedule and perform quarterly vulnerability scans using Metasploit and Nexpose.
• Analyze scan outputs to create remediation documentation and track corrective actions through to completion.
• Conduct gap analyses to identify missing controls required for ISO 27002 certification.
• Develop, modify, and document formal information security policies, procedures, and standards.
• Coordinate third-party vulnerability scans and interpret PCI compliance requirements for the technical environment.

Required Skills

• 5+ years of experience in information security.
• Hands-on experience with Metasploit and Nexpose.
• Proven experience developing and managing policies and procedures for PCI and ISO 27001/27002.
• Strong networking background to interpret scan results and define technical remediation steps.
• Experience performing gap analyses and building certification roadmaps.
• Knowledge of SIEM tools.
• Ability to document complex security processes and technical standards.

Preferred Skills

• Experience with McAfee SIEM.

Key Skills

Education

Any Graduate