Senior IT Cyber Security Specialist

About the Company

Responsibilities

• ● Lead vulnerability management activities, including scanning, analysis, risk assessment, reporting, and remediation tracking across enterprise environments.
• ● Partner with application owners, infrastructure teams, service providers, and security stakeholders to prioritize and address vulnerabilities based on business risk.
• ● Drive remediation efforts by coordinating patch management activities and supporting teams through critical vulnerability resolution.
• ● Utilize threat intelligence, exploitability data, and business context to prioritize security risks and improve decision-making.
• ● Leverage automation and AI-assisted tools to enhance vulnerability analysis, prioritization, and operational efficiency.
• ● Monitor and manage Sonova's external attack surface to identify emerging exposure risks and strengthen security defenses.
• ● Develop and deliver vulnerability management training and guidance to technical stakeholders and business partners.
• ● Create executive and operational reporting on vulnerability trends, risk exposure, remediation progress, and compliance status.
• ● Collaborate with internal and external partners to improve vulnerability management processes, technologies, and security practices.
• ● Support security investigations and compliance-related activities when required.

Requirements

• ● Degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience
• ● GIAC (GCIH or similar), CISA, CompTIA Security+, Certified Ethical Hacker (CEH), CCNA, Comparable cybersecurity certifications
• ● Hands-on experience in vulnerability management, cybersecurity operations, or security risk management
• ● Experience working with vulnerability management tools such as Nessus, Qualys, or similar platforms
• ● Experience coordinating remediation efforts across multiple technical teams
• ● Familiarity with cloud environments, including IaaS, PaaS, and SaaS platforms
• ● Experience working with external vendors and managed security service providers
• ● Strong understanding of vulnerability management frameworks and best practices
• ● Knowledge of security standards and frameworks, including OWASP, NIST, and CIS Benchmarks
• ● Solid understanding of networking concepts, including TCP/IP, DNS, VPNs, and related protocols
• ● Experience with Windows, Linux, Unix, and macOS environments
• ● Familiarity with web application security tools and vulnerabilities, including Burp Suite and OWASP ZAP
• ● Experience with patch management processes and platforms
• ● Proficiency with collaboration and workflow tools such as Jira, Confluence, Microsoft Teams, and Slack
• ● Strong analytical and problem-solving abilities
• ● Ability to evaluate risk and communicate complex technical concepts to both technical and non-technical audiences
• ● Strong decision-making and prioritization skills
• ● Highly organized, detail-oriented, and process-driven
• ● Self-motivated with a continuous learning mindset
• ● Collaborative, service-oriented, and skilled at building trusted relationships
• ● Passion for continuous improvement and operational excellence
• ● Strong written and verbal communication skills in English

Benefits

• ● Exciting and challenging work environment
• ● Collaborative culture
• ● Opportunities for continuous self-improvement
• ● Opportunities for flexible hybrid model work environment
• ● A company that values diversity and inclusion
• ● Rich benefits plan including wellness benefit, paramedical (massage therapist, naturopath, etc.) and competitive compensation including variable component and employer match on pension contributions
• ● Mentorship program and career development plans
• ● Plan rules/offerings dependent upon group Company/location.