Vulnerability Management Specialist – IT Security

About the role

ING Hubs Philippines is seeking a Vulnerability Management Specialist to join its IT Security team. You will be responsible for overseeing the end‑to‑end vulnerability management lifecycle, ensuring that risk scores stay within the organization’s risk appetite and supporting compliance initiatives.

Key responsibilities

• Monitor and report vulnerability risk scores, participating in risk opinion processes.
• Review vulnerability metrics, drive remediation, and coordinate with DevOps and risk officers.
• Contribute to audits, compliance reviews and act as a liaison between the global CISO organization and local teams.
• Perform deep‑dive analyses to identify root causes of control defects.
• Validate, triage, score, track and verify remediation actions, enforcing SLAs and maintaining audit trails.
• Continuously improve scanning processes, reduce false positives and increase automation.

Required profile

• Strong understanding of vulnerability management concepts, CVEs, CVSS scoring and threat intelligence.
• Excellent stakeholder management and communication skills, capable of advising diverse audiences.
• Ability to prioritize remediation based on risk, asset criticality and compensating controls.

Required skills

• Vulnerability scanning tools: Qualys, Tenable, Rapid7, Microsoft Defender, Prisma Cloud.
• Operating systems, networking fundamentals, cloud technologies and common technical architectures.
• Security frameworks and standards: ISO 27001, NIST, CIS Controls, OWASP.