Job Description

We are seeking a Cybersecurity Vulnerability Management (VM) & NIS2 Compliance Analyst to support vulnerability management operations and NIS2 compliance initiatives across APAC, EMEA, and US regions. This role focuses on aligning vulnerability management processes with NIS2 cybersecurity requirements, supporting regulatory readiness, and strengthening the organization's cybersecurity risk management framework. The successful candidate will collaborate with cross-functional stakeholders to drive compliance, security assessments, reporting, and continuous improvement.

Key Responsibilities

• 
  Support the implementation and ongoing maintenance of NIS2 compliance and regulatory readiness initiatives.
• 
  Perform NIS2 control mapping and support compliance operations to ensure alignment with cybersecurity requirements.
• 
  Maintain mappings between vulnerability management activities and NIS2-aligned controls, including:
  • 
    Cybersecurity risk analysis
  • 
    Vulnerability management
  • 
    Incident handling
  • 
    Business continuity
  • 
    Supply chain security
• 
  Support vulnerability detection, assessment, prioritization, and remediation activities based on industry best practices.
• 
  Contribute to the organization's Threat and Vulnerability Management program by applying information security best practices and driving program maturity.
• 
  Analyze vulnerabilities using the CVSS (Common Vulnerability Scoring System) framework to determine risk severity and prioritization.
• 
  Conduct security assessments and assist with evidence collection for audits and compliance reviews.
• 
  Prepare compliance documentation, dashboards, and stakeholder reports.
• 
  Monitor compliance activities and recommend improvements to strengthen cybersecurity controls.
• 
  Collaborate with security, infrastructure, and business teams to ensure effective implementation of cybersecurity controls.
• 
  Support incident reporting readiness and continuous compliance activities in accordance with NIS2 requirements.
• 
  Assist in maintaining documentation and operational processes related to vulnerability management and regulatory compliance.

Required Skills & Experience

• 
  Hands-on experience supporting NIS2 compliance programs, regulatory readiness, or cybersecurity governance initiatives.
• 
  Strong understanding of NIS2 Directive, including:
  • 
    Governance requirements
  • 
    Cybersecurity risk management
  • 
    Incident reporting obligations
  • 
    Compliance expectations
• 
  Experience in Vulnerability Management and cybersecurity operations.
• 
  Knowledge of Threat and Vulnerability Management processes and industry best practices.
• 
  Experience conducting security assessments, evidence collection, and compliance documentation.
• 
  Strong understanding of CVSS scoring methodology and vulnerability risk analysis.
• 
  Experience preparing security metrics, dashboards, and compliance reports.
• 
  Strong analytical and reporting skills.
• 
  Excellent communication and stakeholder management skills.
• 
  Ability to work collaboratively across global teams.

Preferred Qualifications

• 
  Experience supporting cybersecurity compliance frameworks such as NIS2, ISO 27001, NIST CSF, or similar regulatory frameworks.
• 
  Familiarity with enterprise vulnerability management tools.
• 
  Experience supporting audit activities and regulatory assessments.
• 
  Knowledge of cybersecurity governance, risk, and compliance (GRC) practices.

Technical Skills

• 
  Vulnerability Management (VM)
• 
  NIS2 Compliance
• 
  Cybersecurity Governance
• 
  Cybersecurity Risk Management
• 
  Threat & Vulnerability Management
• 
  CVSS Scoring
• 
  Security Assessments
• 
  Compliance Operations
• 
  Compliance Documentation
• 
  Incident Management
• 
  Incident Reporting
• 
  Risk Analysis
• 
  Business Continuity
• 
  Supply Chain Security
• 
  Data Analysis & Reporting
• 
  Information Security