Job title: Senior Cyber Security Analyst – Vulnerability Posture Management

Location: Sydney, NSW

Start Date: ASAP

Duration: 12-month contract with high possibility of extension.

Working Flexibility: Hybrid, Full Time

NTT DATA is seeking a Senior Cyber Security Analyst – Vulnerability Posture Management to support vulnerability management, exposure management, secure configuration and security posture capabilities across a complex enterprise environment.

This is a hands-on cyber security role focused on identifying and prioritising vulnerabilities, driving remediation, improving secure configuration standards and supporting compliance and assurance activities. The successful candidate will combine strong technical expertise across enterprise vulnerability management platforms with the stakeholder skills required to take vulnerabilities from identification through to remediation and risk reduction.

Is innovation part of your DNA? Do you want to enable a connected future for people, organizations, and society?

Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do outstanding things with technology to create a more secure and connected future.

We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA.





We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport.

Together we enable the connected future.

Key Responsibilities

- Conduct vulnerability assessments, security posture reviews and compliance monitoring across complex enterprise environments.
- Configure, run and interpret vulnerability and compliance scans using platforms such as Tenable, Qualys or Rapid7.
- Apply risk-based vulnerability prioritisation using severity, exploitability, threat intelligence, known exploitation, asset criticality, exposure and business impact.
- Configure and customise CIS Benchmarks, including security checks, exclusions, thresholds and compliance policies to meet organisational requirements.
- Partner with infrastructure, application, architecture and security teams to develop remediation plans, track progress and drive vulnerabilities through to resolution.
- Support secure configuration, system hardening, exposure management, cyber risk assessments,



audits and control assurance activities.
- Produce meaningful vulnerability metrics and reporting, clearly communicating technical risk and remediation recommendations to technical and non-technical stakeholders.

Skills & Experience

- Strong hands-on experience with enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7 or equivalent.
- Demonstrated vulnerability management experience covering discovery, risk assessment, prioritisation, remediation planning, tracking and risk reduction.
- Strong practical knowledge of CIS Benchmarks, particularly customising benchmarks, checks, exclusions, thresholds and compliance policies beyond standard out-of-the-box configurations.
- Strong understanding of risk-based vulnerability management, secure configuration, system hardening, security posture management and exposure management.
- Knowledge of security frameworks and standards including Essential Eight, ASD Information Security Manual (ISM), NIST Cybersecurity Framework and CIS Benchmarks.
- Experience supporting cyber security audits, compliance assessments, control assurance, security risk assessments and governance activities.
- Excellent stakeholder management skills with demonstrated capability to influence technology teams, manage competing remediation priorities and translate technical vulnerabilities into business-relevant risks. Experience with Microsoft Defender, Microsoft Sentinel, attack surface management or exposure management platforms will be highly regarded.

Questions? Reach out: [email protected]

📌 Senior Cyber Security Analyst (Vulnerability Posture Management) (Sydney)
🏢 Ntt Data
📍 Sydney