Key Responsibilities:

• Conduct internal vulnerability scans
• Facilitate and monitor external vulnerability assessments and VA/PT performed by third‑party assessors annually in compliance with BSP requirements.
• Manage and ensure quarterly PCI‑DSS ASV scans for all internet‑facing applications handling full card numbers.
• Perform re‑validation scans to confirm remediation of previously identified vulnerabilities
• Coordinate with system owners and technical teams to ensure remediation within mandated timelines
• Track remediation commitments and enforce risk‑based prioritization
• Ensure monthly patch cycles for servers and immediate deployment of emergency or zero‑day patches (within 48 hours)
• Maintain automated patching tools and ensure reporting accuracy.
• Maintain comprehensive vulnerability and patch dashboards, including Scan results, Risk treatment action plans, Remediation timelines, Co...