Vulnerability Management - Information Security Engineer III

As an Information Security Engineer III at NCR's Global Information Security team, your role will involve developing and implementing NCR's corporate information security program. This program aims to safeguard the confidentiality, integrity, and availability of information resources. Your responsibilities will include architecture and design for information security controls, policy enforcement, security awareness training, risk management, assessment, monitoring, incident management, and threat and vulnerability management. You will be tasked with identifying, analyzing, and mitigating vulnerabilities within the systems by conducting regular vulnerability assessments using tools like Rapid7. It is crucial to collaborate with cross-functional teams to ensure the security of the infrastructure. You will generate detailed reports for stakeholders, prioritize and remediate security vulnerabilities, and work closely with the Incident Response team during security incidents. Additionally, you will be responsible for patch management, developing security best practices, providing training sessions, maintaining documentation, and staying updated with the latest security trends. To qualify for this role, you should have a Bachelor's degree in Computer Science, Information Security, or a related field, along with a minimum of 5 years of experience in vulnerability management. Proficiency in using vulnerability management tools, a strong understanding of network protocols, operating systems, and security architectures, as well as experience with incident response and patch management processes are required. Excellent analytical and problem-solving skills, effective communication skills, knowledge of relevant security frameworks, and the ability to prioritize work are essential for success in this position. Additionally, you should be willing to learn new tools and processes to continuously improve the vulnerability management program.,