Job Summary

Job Description: Vulnerability Management Analyst
Location: Ireland
Experience: 3+ years
Function: Cybersecurity / Vulnerability Management / Product Security
Role Summary
The Vulnerability Management Analyst will support vulnerability-management and product-security activities across the in-scope Hybrid Cloud environment. The role will focus on vulnerability management, Software Bill of Materials (SBOM) activities, and related security/compliance support. The SOW specifically identifies Vulnerability Management, SBOM, and code generation as required capabilities for this Ireland-based position. 
Key Responsibilities
1. Vulnerability Management

Support vulnerability-management activities for in-scope products and services.
Assist with identification, tracking, documentation, and management of security vulnerabilities.
Help maintain vulnerability-related evidence required for product security and regulatory compliance activities.
Contribute to compliance readiness and vulnerability-management workstreams supporting the EU Cyber Resilience Act (CRA). 

2. SBOM Management and Assessment

Support creation or validation of Software Bills of Materials (SBOMs) for in-scope products.
Assist with maintaining complete component inventories.
Support identification of known vulnerabilities and license/compliance status.
Document gaps against applicable CRA SBOM requirements and associated remediation actions.
3. Compliance and Audit Evidence Support

Support evidence collection and documentation associated with vulnerability-management and product-compliance activities.
Contribute to audit-readiness activities, including maintaining evidence inventories and documenting identified gaps and remediation actions.
Support compliance assessments covering relevant frameworks including EU CRA, SOC 2, PCI DSS, NIST CSF/SSDF, and ISO 27001. 

4. Risk and Remediation Tracking

Support identification and documentation of product-security and compliance gaps.
Maintain appropriate information for risks and remediation items, including control references, recommendations, owners, and target dates where applicable.
Contribute to risk-assessment and mitigation registers covering in-scope products and workstreams. 

5. Documentation and Reporting

Contribute vulnerability-management inputs to weekly and monthly program reporting.
Support reporting covering completed activities, work in progress, upcoming activities, risks, issues, blockers, dependencies, and applicable compliance KPIs.
Maintain documentation and evidence in the designated repositories and support appropriate review and approval processes. 

Key Responsibilities

Skill Requirements

Other Requirements