Vulnerability Remediation Associate
Scotiabank · Bogotá
- Requisition ID: 276026
- Employee Referral Program – Potential Reward: $200.00
- We are committed to investing in our employees and helping you continue your career at ScotiaTech.
Purpose
As part of Scotiabank's Cyber Security Operations (CSOps), the Enterprise Vulnerability Management (EVM) Program supports the identification, prioritization, communication, tracking, escalation, and reporting of vulnerability exposure across the Bank's technology environment. EVM Operations works with application, infrastructure, penetration testing, scanning, and technology teams to drive vulnerabilities through treatment and validation within established remediation expectations.
The remediation function supports recurring vulnerability-management operations across infrastructure, web application security, penetration testing, and priority vulnerability processes. The team uses enterprise vulnerability data, risk scoring, ticketing and ServiceNow workflows, dashboards, and stakeholder communications to maintain visibility of remediation progress and support timely closure.
Accountabilities:
The Vulnerability Remediation Associate is responsible for supporting the day-to-day execution of EVM vulnerability remediation activities. Working under the direction of senior EVM remediation staff, the Associate reviews assigned vulnerability findings, validates key asset and ownership information, communicates with remediation owners, tracks remediation plans and target dates, follows up on outstanding actions, and maintains accurate ticket and status information.
The role supports Zero Tolerance and other prioritized vulnerability workflows by monitoring assigned findings, coordinating acknowledgement and remediation updates, supporting rescan or retest validation, documenting evidence and status, and escalating unresolved issues through the established EVM process. The Associate also supports operational reporting, data-quality follow-up, dashboard and ticket reconciliation, and EVM workflows in Jira and ServiceNow USEM.
Education / Experience/ Other Information
- Experience or foundational knowledge in vulnerability management, cybersecurity operations, technology risk, infrastructure, application security, or a related discipline.
- Ability to review vulnerability findings from infrastructure scanning, web application security, and penetration-testing sources and accurately document remediation status.
- Experience supporting remediation tracking, ticket management, action follow-up, or operational case management using tools such as Jira and ServiceNow.
- Ability to coordinate with application owners, infrastructure teams, security teams, and technology stakeholders to obtain remediation plans, target dates, change references, and evidence.
- Ability to monitor assigned vulnerabilities against remediation targets and raise potential breaches, stalled remediation, missing ownership, or unresolved dependencies through established escalation channels.
- Ability to support validation using scan results, rescans, retests, or other approved remediation evidence and maintain complete closure records.
- Working knowledge of CVEs, severity, CVSS, risk scoring, internet exposure, asset criticality, compensating controls, remediation, exceptions, and false positives.
- Ability to identify data-quality issues involving asset information, application ownership, assignment, vulnerability status, or risk-scoring inputs and document them for follow-up.
- Strong written communication skills for remediation notices, follow-ups, ticket notes, operational summaries, and escalation updates.
- Strong attention to detail when reviewing vulnerability records, ticket fields, status changes, ownership information, and remediation evidence.
- Ability to use dashboards, spreadsheets, ticket queues, and operational reports to reconcile vulnerability and remediation information.
- Working knowledge of Microsoft 365 tools including Excel, Outlook, Teams, Word, and SharePoint.
- Familiarity with Tenable, ServiceNow Vulnerability Response / USEM, Jira, Power BI, or comparable tools is an asset.
- Relevant cybersecurity or technology certifications and post-secondary education in cybersecurity, information technology, computer science, or a related discipline are considered assets
- Location(s): Colombia : Bogota : Bogota
- ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits.
At ScotiaTech, we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at ScotiaTech; however, only those candidates who are selected for an interview will be contacted.