Vulnerability Management - Information Security Engineer III

As an Information Security Engineer III at NCR's Global Information Security team, your role involves developing and implementing NCR's corporate information security program. This program aims to safeguard the confidentiality, integrity, and availability of information resources. Your responsibilities include: - Architecture and design for information security controls - Policy enforcement - Security awareness training - Risk management - Assessment - Monitoring - Incident management - Threat and vulnerability management You will be tasked with identifying, analyzing, and mitigating vulnerabilities within the systems by conducting regular vulnerability assessments using tools like Rapid7. Collaboration with cross-functional teams is crucial to ensure the security of the infrastructure. You will generate detailed reports for stakeholders, prioritize and remediate security vulnerabilities, and work closely with the Incident Response team during security incidents. Additionally, you will be responsible for patch management, developing security best practices, providing training sessions, maintaining documentation, and staying updated with the latest security trends. Qualifications required for this role: - Bachelor's degree in Computer Science, Information Security, or a related field - Minimum of 5 years of experience in vulnerability management - Proficiency in using vulnerability management tools - Strong understanding of network protocols, operating systems, and security architectures - Experience with incident response and patch management processes - Excellent analytical and problem-solving skills - Effective communication skills - Knowledge of relevant security frameworks - Ability to prioritize work Your willingness to learn new tools and processes to continuously improve the vulnerability management program is also essential for success in this position.,