Cyber Security Vulnerability Management Associate
The Global Information Security (GIS) organization delivers proactive cybersecurity defense for the global Pfizer. Our mission is to identify and drive out critical vulnerabilities across all of Pfizer's digital information assets ranging from the manufacturing floor, distribution centers, core data centers, enterprise managed clients and out to our patient facing solutions. We achieve this mission through a team of world-class talent that focuses on building a strong partnership to build security into all aspects of our business. Across all aspects of our organization, we utilize top-tier technologies, industry leading best practices, advanced analytics and the promotion of a cybersecurity ownership and partnership culture across the company.
The Cyber Security Vulnerability Management Associate will be responsible for performing vulnerability scanning and assessments throughout the enterprise to protect the confidentiality, integrity and availability of information assets using a risk-based approach.
This role ensures continuous vulnerability life cycle management with focus on analysis and validation of scan results, setting relative Pfizer risk ratings, providing remediation recommendations, tracking and reporting of vulnerabilities to improve the overall security posture of Pfizer. It is based out of Sandwich (Kent, UK), with flexible working possible.
TASKS
Perform scheduled and/or on demand vulnerability scanning and assessments, including triage, reports and analysis.Analysis and validation of scan/assessment results communicated to stakeholders through reporting and result review meetings.Interacts directly with stakeholders to address issues related to remediation of vulnerability scanning and assessments.Support activities that are focused on helping key stakeholders with the interpretation of their vulnerability results, providing guidance on the remediation of existing or emerging threats, and evaluating false positives.Configure, maintain, operate vulnerability management tools.Work with metrics to help analyze and prioritize vulnerabilities for remediation.Track remediation work consistently in order to advance improvements to program and closure of vulnerabilities.Provide remediation support on any potential findings as needed.Able to successfully partner with other security, manufacturing and IT infrastructure professionals to assess potential impact from vulnerabilities and determine appropriate mitigating controls.Work with industry standard tools as well as learn new innovative solutions.Work across teams and with 3rd party service providersSupport penetration testing and red team exercises if applicable.
QUALIFICATIONS
BS in Security and Risk Analysis, Information Assurance, and Cybersecurity, or related field.Demonstrable professional experience in an Information Security role.Entry level comprehension of operating systems, network protocols, and applications development.Foundational understanding of security testing tools, port scanners, vulnerability scanners, and exploit frameworks.Basic understanding of industry frameworks and best practices: CIS Critical Security Controls, Threat Modeling, OWASP, NIST 800 SeriesUnderstanding of malware, emerging threats, attacks, and vulnerability management with a personal drive to continue learning.Exposure to scripting or programming languages like Python, Ruby, or PowerShellHigh level of integrity and strong ethical valuesExcellent analytical and problem-solving skills.Strong written and verbal communication skillsStrong team player who collaborates well with others to solve problems.
Purpose
Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.
Digital Transformation Strategy
One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.
Flexibility
We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let's start the conversation!
Equal Employment Opportunity
We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms - allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees.
DisAbility Confident
We are proud to be a Disability Confident Employer and we encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments necessary to support your application and future career. Our mission is unleashing the power of our people, especially those with unique superpowers. Your journey with Pfizer starts here!
Information & Business Tech