This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are looking for an IT Risk & Vulnerability Analyst to support one of our strategic CIB clients in keeping their software secure and up to date. The ideal candidate has experience reviewing software versions, checking vulnerability data, and working closely with IT teams to fix issues. In this role, you will help track which software needs to be updated, understand where risks come from, and make sure the right teams take action. You will also help keep our internal tools and reports accurate so we can make good decisions and stay compliant.
Job Responsibility:
Track application and software versions across the organization and identify end-of-life, outdated, or vulnerable software
Analyze software vulnerability and obsolescence data using tools such as Qualys and Splunk, with a focus on applications and packages, not infrastructure
Maintain and improve the application / software inventory, ensuring version data is accurate and up to date
Work closely with application owners, developers, and IT teams to define target software versions and remediation plans
Coordinate and follow up on software upgrades, patches, and version alignments until completion
Track remediation actions in tools like ServiceNow or Jira and ensure timelines are respected
Prepare clear reports and KPIs related to software risk, obsolescence, and upgrade progress
Support audits by providing documentation related to software versions, lifecycle, and remediation actions
Contribute to improving processes, controls, and tooling related to software risk and application lifecycle management
Requirements:
Bachelor’s degree in IT, Cybersecurity, or a similar field
Minimum 3+ years of experience working on software obsolescence, patching, or vulnerability management, ideally in a financial or regulated environment
Comfortable using tools like Qualys, Splunk, ServiceNow, or Jira to review data and track actions
Good understanding of how software is built, maintained, and upgraded
Strong analytical skills with the ability to spot issues and suggest improvements
Able to manage several tasks at once and stay organized in a fast-moving environment
French is helpful but not required
What we offer:
401(k) retirement plan with company matching
15 days of paid vacation per year at hire and up to 27 according to seniority (annual untaken vacation days are cashed out)
8 paid holidays + 5 sick days + 2 personal days per year
Company health, dental, and vision insurance plans + FSA