Technical Business Analyst (Vulnerability Management & Risk Assessment, Issue Triage & Categorization) Experience Required: • Analyze CISO-level data to extract actionable insights regarding security vulnerabilities, risk exposure, and trending issues across various internal teams. • Perform structured issue triage and categorization, breaking down raw security findings into logical fix categories based on team ownership and fix complexity. • Lead weekly data reviews to monitor security weakness trends, recurring vulnerability types, and emerging threat patterns. • Identify strategic security priorities by pinpointing high-impact fixes that significantly influence Key Risk Indicators (KRIs). • Work closely with cross-functional teams to communicate findings, improve vulnerability management processes, and support proactive remediation planning. • Continuously enhance internal visibility by producing detailed reports, dashboards, and visualizations summarizing key risks and progress. Skills & Qualifications: • Proven 13+ years of experience in cybersecurity, vulnerability management, or risk analysis roles, ideally within large enterprise environments. • Strong data analysis capabilities – able to clean, interpret, and categorize complex security datasets. • Proficiency in tools such as Excel, Power BI, Tableau, or Python/R for reporting and visualization. • Deep understanding of vulnerability types, risk categorization, and issue triaging frameworks (e.g., CVSS, OWASP, MITRE ATT&CK). • Excellent stakeholder communication skills to coordinate with technical and non-technical teams. • Strong presentation skills – capable of translating technical data into compelling executive summaries. • Demonstrated ability in problem-solving and developing security recommendations with a strategic impact. • Experience working with CISO teams, GRC functions, or Information Security programs. Preferred Qualifications: • Background in cybersecurity frameworks (NIST, ISO 27001, CIS Controls). • Familiarity with ticketing systems (e.g., Jira, ServiceNow) and vulnerability management platforms (e.g., Qualys, Tenable, Rapid7). • Experience with KRIs, risk scoring methodologies, and governance dashboards. • Bachelor’s or Master’s in Computer Science, Information Security, or related field. • Relevant certifications (e.g., CISSP, CRISC, CISA, Security+) are a plus.