Vulnerability Management Analyst

Vulnerability Management Analyst

North is seeking a detail-oriented Vulnerability Management Analyst to join our Cybersecurity team. The role involves protecting payment processing platform, cloud environments, and internal infrastructure by identifying, analyzing, and prioritizing technical vulnerabilities. You will work closely with engineering, cloud infrastructure, and IT teams to leverage enterprise security tools like Wiz and Tenable for risk tracking and advocacy.

What you'll do:

• Vulnerability Identification & Scanning: Operate, maintain, and assist in configuring scanning platforms (Wiz, Tenable) across various assets.
• Analysis & Prioritization: Review vulnerability data, reduce false positives, and prioritize risks based on business context, CVSS scores, threat intelligence, and payment industry risk factors.
• Remediation Advocacy: Act as a liaison to engineering, IT, and operations teams to champion patching initiatives, explain technical risks, and follow up on overdue SLAs.
• Tracking & Metrics: Track remediation progress, communicate risk posture to leadership, and maintain dashboards, reports, and KPIs.
• Compliance Support: Support security audit and compliance efforts (such as PCI-DSS) by providing evidence of regular vulnerability scanning and remediation.
• Continuous Improvement: Refine vulnerability management processes, playbooks, and automated workflows to reduce exposure windows.

What we need from you:

• Education And Experience: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent practical experience. 3+ years of hands-on experience in cybersecurity, IT, system administration, or risk management.
• Experience: Hands-on experience operating enterprise scanning platforms, specifically Wiz and Tenable. Knowledge of core OS concepts (Windows, Linux), cloud security fundamentals (AWS, Azure, or GCP), and enterprise networking.
• Skills & Abilities: Solid understanding of vulnerability management lifecycle, Common Vulnerabilities and Exposures (CVEs), CVSS scoring, and common attack vectors and vulnerability exploitation. Analytical mindset, excellent verbal and written communication skills, and interpersonal skills to build relationships across teams.

Preferred:

• 5+ years of relevant or hands-on experience in cybersecurity, IT, system administration, or risk management.
• Experience within fintech, payment processing, or another highly regulated, fast-paced environment.
• Familiarity with payment industry standards and security frameworks (PCI-DSS, NIST Cybersecurity Framework, CIS Benchmarks).
• Experience using ticketing and project tracking tools such as Jira to track vulnerability work items.
• Basic scripting knowledge (Python, PowerShell, Bash, or API queries) to automate reporting or routine tasks.
• Certifications such as CompTIA Security+, Network+, or eJPT are a plus, but not required.

Pay Range:

$70,000 - $110,000 Pay within this range varies by work location and on job-related knowledge, skills, and experience.

About North:

We are an end-to-end payment solutions company committed to helping entrepreneurs grow their businesses. We provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We are proud to be an equal opportunity employer and offer benefits that help our team members further their overall well-being through unique initiatives that are both personally and professionally fulfilling.