Threat, Vulnerability and Security Patch Management Coordinator (SecSK) City of London, England
Salary: | market rates |
Threat, Vulnerability and Security Patch Management Coordinator
London
12 months
Duties
Perform an interface and coordination role between customer the customer and client platform teams for:
• Security Patch Notifications (SPN/EPN)
• Security Component Updates
• Security Vulnerabilities
• Security Policy Non-compliances
• Identify the latest security threats
Responsibilities
• Provide a single point of contact for customer to assign security patch notifications (SPN/EPN), Security Component Updates, Vulnerability actions and Non-compliance actions to client
• Provide a single point of contact between client platform teams and customer security teams regarding identified threats and vulnerabilities.
• Monitor the team email task ID for new customer requests
• In the case of “critical” vulnerability and non-compliance actions assigned by customer to the client coordinate with the analyst responsible for CSI (Cyber Security Incidents).
• Validate requests from the customer (Security patch notifications (SPN/EPN), Security Component Updates, Vulnerability actions and Non-compliance actions)
• Identify client assignees (platform teams, platform focals, product managers) and assign:
o Security patch notifications (SPN/EPN)
o Security component updates
o Vulnerability actions
o Non-compliance actions
• Ensure that the platform teams provide an initial SPN/EPN response and that this is shared with the customer
• Provide guidance to the platform teams on Risk Management and Waivers
• Ensure that exceptions reported by the platform teams are recorded and shared with the customer Cyber Security Team
• Liaise with the platform focals to track and record the status of Security Patching as well as status of remediation of vulnerabilities and non-compliances
• Share Security Patch status with the customer, including confirmation of Security Patch completion (and completion certificate where applicable).
• Provide support to the client Reporting team
If you are interested in this role please apply online to be considered.
London
12 months
Duties
Perform an interface and coordination role between customer the customer and client platform teams for:
• Security Patch Notifications (SPN/EPN)
• Security Component Updates
• Security Vulnerabilities
• Security Policy Non-compliances
• Identify the latest security threats
Responsibilities
• Provide a single point of contact for customer to assign security patch notifications (SPN/EPN), Security Component Updates, Vulnerability actions and Non-compliance actions to client
• Provide a single point of contact between client platform teams and customer security teams regarding identified threats and vulnerabilities.
• Monitor the team email task ID for new customer requests
• In the case of “critical” vulnerability and non-compliance actions assigned by customer to the client coordinate with the analyst responsible for CSI (Cyber Security Incidents).
• Validate requests from the customer (Security patch notifications (SPN/EPN), Security Component Updates, Vulnerability actions and Non-compliance actions)
• Identify client assignees (platform teams, platform focals, product managers) and assign:
o Security patch notifications (SPN/EPN)
o Security component updates
o Vulnerability actions
o Non-compliance actions
• Ensure that the platform teams provide an initial SPN/EPN response and that this is shared with the customer
• Provide guidance to the platform teams on Risk Management and Waivers
• Ensure that exceptions reported by the platform teams are recorded and shared with the customer Cyber Security Team
• Liaise with the platform focals to track and record the status of Security Patching as well as status of remediation of vulnerabilities and non-compliances
• Share Security Patch status with the customer, including confirmation of Security Patch completion (and completion certificate where applicable).
• Provide support to the client Reporting team
If you are interested in this role please apply online to be considered.