Exposure Management Analyst

Key attributes include:
2-4 years of experience in IT, cybersecurity, vulnerability management, compliance, governance, infrastructure operations, audit support, or security monitoring.
Understanding of vulnerability scan results, penetration testing findings, and remediation workflows.
Experience working with ticketing, ITSM, or GRC platforms to track and manage remediation activities.
Strong organizational, analytical, and decision-making skills.
Ability to collaborate with technical and non-technical stakeholders and influence remediation efforts.
Familiarity with security configuration standards, CIS benchmarks, and hardening guidelines.
Professional proficiency in English.
Eligibility to work in Spain.
Curiosity, adaptability, and a willingness to learn new technologies and security domains.

What do we expect from you?
Strong understanding of vulnerability management and exposure management principles.
Ability to interpret technical security findings and coordinate remediation efforts effectively.
Experience managing large volumes of work items without losing ownership or oversight.
Excellent stakeholder management, communication, and collaboration skills.
Confidence to make informed decisions and challenge unsupported claims when necessary.
Structured and proactive approach to prioritization, follow-up, and issue resolution.
Knowledge of security baselines, hardening standards, and compliance requirements.
Commitment to process quality, audit readiness, and risk reduction.
Team-oriented mindset with the willingness to learn and grow within a global security environment.
Ability to work in a fast-paced, highly regulated environment while maintaining attention to detail and accountability.

Nice to have:
Experience with Nexpose or similar vulnerability scanning solutions.
ServiceNow Vulnerability Response knowledge.
Azure cloud security experience.
Security certifications such as CompTIA Security+.
Experience in financial services or other regulated industries.
German language skills.

What we look for?
We are looking for an Exposure Management Analyst with a solid foundation in IT security, vulnerability management, and stakeholder coordination. The ideal candidate has practical experience managing security findings, remediation processes, and compliance activities within complex technology environments.

Main tasks and accountabilities will be:
Manage security findings and remediation activities throughout their entire lifecycle.
Ensure all findings are assigned to the appropriate technology or application owners and actively tracked until closure.
Review and approve or reject false-positive requests based on evidence and technical analysis.
Analyze vulnerability scan outputs, penetration test reports, and security findings to determine impact and required actions.
Coordinate remediation efforts with technology teams, security experts, and system owners.
Monitor compliance with security baselines and follow up on remediation plans.
Lead resolution activities for findings affecting multiple teams or organizational units.
Serve as a key contact for stakeholders requiring support, guidance, or escalation assistance.
Ensure documentation, evidence, and remediation records meet audit and compliance requirements.
Produce operational reporting on remediation performance, overdue findings, risk indicators, and overall exposure status.
Escalate critical or stalled issues and coordinate with incident response teams when required.
Contribute to continuous improvement initiatives and support the onboarding of new exposure management processes and security domains.

Work Location
Hybrid position in Madrid (3 days at client´s office, Madrid city center).

Work Schedule
Business hours.