Volunteer Vulnerability Management Analyst

Job Title: Vulnerability Management Analyst

Reports to: Governance, Risk, and Compliance Lead

Location: Remote (WFH)

About the Organization:

Menzies Philanthropic Foundation is a non-profit organization deeply committed to global orphanage support, guided by the Menzies 5 Keys of Needs. Our overarching mission is to lead the way in creating eco-regenerative conscious communities, serving as secure sanctuaries for orphans and vulnerable families. With a focus on addressing trauma and promoting holistic healing, we strive to foster environments where individuals can thrive and flourish.

As part of the Menzies Mission Non-profit Organization, My Source Network stands as an innovative digital platform dedicated to holistic healing. By connecting individuals with a diverse network of practitioners and resources, we facilitate access to various healing modalities and transformative events. Our platform empowers users to embark on personalized wellness journeys, fostering growth and well-being in every individual we serve.

Join our team and help us create exceptional digital experiences for our users!

Job Overview:

The Vulnerability Management Analyst will be responsible for overseeing the vulnerability management process, ensuring the timely identification, prioritization, and remediation of security vulnerabilities across our systems and infrastructure. This role involves collaborating closely with cross-functional teams to develop and implement effective patch management strategies, maintain compliance, and enhance our security posture. The Vulnerability Management Analyst will monitor patch management effectiveness, report on findings, and continuously improve processes to protect the organization from emerging threats.

Key Responsibilities:

• Implement and manage the vulnerability patch management process, including identification, prioritization, and remediation of vulnerabilities.
• Collaborate with IT and Development teams to assess the impact of vulnerabilities and determine associated risk levels.
• Develop and maintain a comprehensive patch management strategy, ensuring timely deployment and adherence to SLAs.
• Participate in vulnerability assessments, track software and system updates, and ensure compliance with secure coding practices and approved tools.
• Monitor and report on patch management effectiveness, identifying areas for improvement and implementing best practices.

Skills and Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience in vulnerability management, patch management, or related security roles.
• Strong understanding of common security vulnerabilities and their potential impact on systems and infrastructure.
• Experience with vulnerability scanning and assessment tools.
• Familiarity with security frameworks and standards such as PCI DSS, NIST, etc.
• Excellent communication and collaboration skills, with the ability to create management presentation materials and work effectively with cross-functional teams.
• Proficiency in reporting and analysis tools, including PowerBI, Advanced Excel, and PowerQuery.

Preferred Qualifications:

• Relevant certifications such as CISSP, CISM, or equivalent are a plus.
• Experience working with IT Audit frameworks and managing security projects.
• Knowledge of emerging threats and best practices in vulnerability and patch management.

Equal Opportunity Employer:

Menzies Philanthropic Foundation is committed to diversity, inclusion, and equal opportunity. We welcome applicants from all backgrounds and do not discriminate based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other characteristic protected by law. Accommodation for the application process is available upon request.