RVD Program Analyst

Location: Charlotte, North Carolina (Onsite)

About the role

The Responsible Vulnerability Disclosure (RVD) Program Analyst will support the development, execution, and ongoing operation of the organization's RVD program. This role coordinates the end-to-end lifecycle of vulnerability disclosures, including intake, validation, routing, partner engagement, and remediation coordination. The analyst will work with Information Security, Technology, and Legal teams to ensure vulnerabilities are tracked and resolved through established processes.

Responsibilities

• Support intake, triage, and tracking of vulnerability disclosures.
• Maintain disclosure lifecycle tracking from identification through closure.
• Coordinate disclosure activities with software vendors, maintainers, and managed disclosure partners.
• Monitor disclosure status, remediation progress, and closure activities.
• Maintain RVD dashboards, metrics, and executive status updates.
• Support the development and maintenance of disclosure policies, procedures, and standards.
• Coordinate interactions with disclosure partners and government clearinghouses.
• Develop and maintain disclosure inventory, status reporting, and remediation tracking.
• Identify trends, risks, and opportunities for process improvement.
• Recommend enhancements to disclosure workflows and support automation opportunities.

Requirements

• 5+ years of experience in one or more of the following areas: Cybersecurity, Technology Risk, Security Program Management, Vulnerability Management, Open Source Security, or Software Supply Chain Security.
• Additional experience required in managing cross-functional initiatives and presenting status updates to leadership.
• Bachelor's degree or equivalent experience.

Skills

• Ability to operate independently and drive program outcomes.
• Experience with data visualization, trend analysis, audit remediation, and vulnerability assessment.

Benefits

• Medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP).
• 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program.
• Access to certification prep, technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and association perks (e.g., CompTIA, IIBA).
• Dedicated customer service team and certified Career Coach.