Enterprise Vulnerability Management Analyst
As an employee at Thomson Reuters, you will play a role in shaping and leading the global knowledge economy. Our technology drives global markets and helps professionals around the world make decisions that matter. Whether solving for today’s challenges or tomorrow’s aspirations, you will work with the industry’s brightest thinkers on diverse projects, creating next-generation solutions that deliver powerful results. As the world’s leading provider of intelligent information, we want your unique perspective to create the solutions that advance our business—and your career.

As an Enterprise Vulnerability Management (EVM) Analyst , you be preforming infrastructure scans across both our corporate on-premise and cloud environments using industry best practices and following the vulnerability management life cycle. As an integral part of the EVM team, the analyst will be responsible for evaluating findings by combining data analysis and technology tools with the end goal of reducing the security risks across the Thomson Reuters enterprise.

About the Role
In this opportunity as Enterprise Vulnerability Management Analyst , you will:

• Perform daily operational activities; including but not limited to scanning, reporting and vulnerability management technology troubleshooting and configuration updates.
• Maintain our scanning platform with maintenance activities and monitor the health of the vulnerability scans, reports, appliances, and connectors.
• Assist in the analysis of vulnerability data from multiple sources including infrastructure and applications to determine the potential risk rating to business assets.  
• Assist in ensuring scan results are presented in appropriate dashboards, reports, and forwarded to other data systems as necessary.
• Assist in working with the technology teams to effectively communicate the risks of identified vulnerabilities and make recommendations for quick remediation.
• Identify bottlenecks and present solutions on how to improve processes or automate tasks to increase operational proficiency.
• Provide technical support to our internal technology and business stakeholders to improve scan coverage, such as assisting with agent installation and troubleshooting.
• Assist in our monthly Patch Tuesday operations performing analysis and exception management.
• Assist in interfacing with third-party vendors and opening support tickets with vendors. 

About You
You’re a fit for the role of Enterprise Vulnerability Management Analyst if your background includes:

• 2+ years of related experience within professional services, vulnerability management, and compliance monitoring.
• Have a passion for the role that security plays in all areas of the Vulnerability Management Lifecycle.
• Scripting experience and a strong desire to strengthen and grow that knowledge to make processes more efficient through automation.
• Have a background in information technology and are interested in transitioning to Cyber Security.
• Have a strong ability to communicate technical information to stakeholders with varying levels of technical aptitude and understanding
• Have the ability and desire to work on simultaneous projects in a fast-paced environment.
• Have a solid understanding of the real time threat indicators and can identify the most critical vulnerabilities when triaging.
• Technical understanding of common application and infrastructure vulnerabilities and risks, countermeasures, and compensating controls.
• Experience in configuring, running and/or analyzing web application or infrastructure scans.

Skills:

• Strong Communication Skills (verbal, written, and ability to partner with others).
• Agile Methodology experience.
• Time Management and the ability to prioritize between multiple tasks and projects.
• Experience with Big Data Analytics reporting tools such as PowerBi is a plus.
• Experience with industry grade web application or infrastructure scanners such as Qualys, Tenable, Rapid 7.
• Knowledge of cloud technologies such as AWS, Azure, OCI and GCP
   

What's in it For You?

You will join our inclusive culture of world-class talent, where we are committed to your personal and professional growth through:

Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected

Wellbeing: Comprehensive benefit plans; flexible and supportive benefits for work-life balance: flexible vacation, two company-wide Mental Health Days Off; work from another location for up to a total of 8 weeks in a year, 4 of those weeks can be out of the country and the remaining in the country, Headspace app subscription; retirement, savings, tuition reimbursement, and employee incentive programs; resources for mental, physical, and financial wellbeing.

Culture: Globally recognized and award-winning reputation for equality, diversity and inclusion, flexibility, work-life balance, and more.

Learning & Development: LinkedIn Learning access; internal Talent Marketplace with opportunities to work on projects cross-company; Ten Thousand Coffees Thomson Reuters café networking.

Social Impact: Ten employee-driven Business Resource Groups; two paid volunteer days annually; Environmental, Social and Governance (ESG) initiatives for local and global impact.

Purpose Driven Work: We have a superpower that we’ve never talked about with as much pride as we should – we are one of the only companies on the planet that helps its customers pursue justice, truth and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.
#LI-IL

Do you want to be part of a team helping re-invent the way knowledge professionals work? How about a team that works every day to create a more transparent, just and inclusive future? At Thomson Reuters, we’ve been doing just that for almost 160 years. Our industry-leading products and services include highly specialized information-enabled software and tools for legal, tax, accounting and compliance professionals combined with the world’s most global news services – Reuters. We help these professionals do their jobs better, creating more time for them to focus on the things that matter most: advising, advocating, negotiating, governing and informing.

We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments that celebrate diversity and inclusion. At a time when objectivity, accuracy, fairness and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward. 

Accessibility 

As a global business, we rely on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace.

We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.

Protect yourself from fraudulent job postings click here to know more.

More information about Thomson Reuters can be found on .