Threat Intelligence & Vulnerability Management Associate

AI summary

Duplo is hiring a Threat Intelligence & Vulnerability Management Associate on a hybrid contract basis in Nigeria. The role covers threat intelligence, vulnerability management, penetration testing coordination, GRC, and compliance with standards such as CBN Cybersecurity Framework, ISO 27001, and PCI DSS. Candidates should have 2–3 years of cybersecurity experience and relevant certifications.

• Hybrid contract cybersecurity role with broad threat intel and vulnerability management scope
• Covers GRC, compliance, and regulatory frameworks relevant to financial services
• Requires 2–3 years of cybersecurity operations experience
• Relevant certifications such as CEH, Security+, CISSP, CISA, or ISO 27001 are preferred

Original source description

We are looking for a Threat Intelligence & Vulnerability Management Associate (Contract) who will support cyber threat intelligence operations, vulnerability assessments, penetration testing coordination, remediation tracking, risk reporting, compliance monitoring, and security governance initiatives across infrastructure, applications, cloud environments, and third-party ecosystems. The role combines technical cybersecurity operations with Governance, Risk, and Compliance (GRC) capabilities to ensure vulnerabilities, emerging threats, and security risks are proactively managed in alignment with regulatory requirements, industry standards, and organizational risk appetite. This is a unique opportunity. You'll have the responsibility and resources to take a significant part in the creation of a paradigm-changing product that will impact millions. The Threat Intelligence & Vulnerability Management Associate is responsible for identifying, analyzing, and mitigating cybersecurity threats and vulnerabilities across the organization’s technology landscape. Responsibilities: Threat Intelligence Management: Monitor and analyze cyber threat intelligence feeds, indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs). Track emerging cyber threats, ransomware campaigns, vulnerabilities, and attack trends relevant to the financial sector. Conduct threat hunting activities and provide actionable intelligence to relevant stakeholders. Produce threat intelligence advisories, alerts, and situational awareness reports. Collaborate with SOC, Incident Response, and Engineering teams during security investigations and incidents. Vulnerability Management: Coordinate periodic penetration testing and remediation activities. Validate remediation actions and ensure closure of identified vulnerabilities within agreed timelines. Analyze vulnerability trends and provide risk-based recommendations to management. Conduct vulnerability assessments across servers, endpoints, databases, applications, cloud, and network devices. Maintain vulnerability dashboards, risk registers, and remediation trackers. Ensure timely patch management coordination with infrastructure and application teams. Governance, Risk & Compliance (GRC): Perform cyber risk assessments and control effectiveness reviews. Assist in policy development, control reviews, and cybersecurity governance reporting. Support compliance with regulatory and industry requirements, including CBN Cybersecurity Framework, NDPC, ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 20001, and PCI DSS. Support internal and external audits, regulatory examinations, and compliance reviews. Maintain risk registers, exception registers, and compliance evidence repositories. Security Monitoring & Reporting: Support continuous improvement of cybersecurity controls and operational resilience. Monitor vulnerability remediation SLA compliance. Develop and maintain cybersecurity metrics, dashboards, and executive reports. Provide periodic reports on cyber risks, threat exposure, and compliance posture. Stakeholder Engagement: Provide security advisory support for projects, system upgrades, and digital transformation initiatives. Conduct awareness sessions on cyber threats and vulnerability management best practices. Work closely with IT Engineering, DevOps, Risk & Compliance teams. Requirements: Strong knowledge of cybersecurity principles, including threat intelligence, vulnerability management, incident response, SIEM tools, cloud security fundamentals, security governance, and regulatory compliance. Must have 2-3 years’ experience: in cybersecurity operations, vulnerability management, threat intelligence, and GRC. Experience: within banking, fintech, telecommunications, or highly regulated industries is an advantage. Relevant certifications such as CEH, Security+, CySA+, CTIA, CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Auditor, COBIT 2019 Foundation, or CGRC are preferred. Strong knowledge of cybersecurity principles, including threat intelligence, vulnerability management, incident response, SIEM tools, cloud security fundamentals, security governance, and regulatory compliance. Excellent communication and reporting skills Bachelor’s Degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or related discipline. Excellent analytical thinking/problem solving skills Ability to analyze security risks, solve problems, communicate effectively, collaborate with stakeholders, maintain confidentiality, and demonstrate strong attention to detail and continuous learning. How to Apply Interested and qualified candidates should: Click here to apply online View all Jobs in Nigeria