Junior Security Specialist – Vulnerability Management

About the role

As a Junior Security Specialist you will support Asahi Europe & International’s information security programme. Working closely with the Technical Security Lead and digital teams, you will help improve the organisation’s security posture through vulnerability management, compliance reporting and audit support.

Key responsibilities

• Run regular vulnerability scans on servers, endpoints and network devices using tools such as Tenable Nessus and Microsoft Defender for Endpoint.
• Analyse scan results, prioritise remediation based on CVSS scores, exploitability and business impact, and produce clear remediation reports.
• Coordinate patching activities with system owners, track progress in the vulnerability management platform and ensure SLA compliance.
• Validate remediation effectiveness through re‑scanning and evidence collection.
• Assist in preparing General IT Controls evidence packs for internal and external audits (J‑SOX, NIST or equivalent).
• Collect and review control evidence for IAM, change management, backup/recovery and security monitoring.
• Maintain accurate records in the GRC platform and support audit readiness throughout the year.

Required profile

• Detail‑oriented and analytically minded professional eager to grow in a structured cybersecurity environment.
• Strong communication skills to work with technical teams and system owners.
• Ability to manage multiple tasks, meet deadlines and follow documented processes.

Required skills

• Experience with vulnerability scanning tools (e.g., Tenable Nessus, Microsoft Defender for Endpoint).
• Understanding of CVSS scoring and patch management processes.
• Familiarity with GRC platforms for audit evidence tracking.
• Knowledge of IT general controls frameworks such as J‑SOX and NIST.
• Basic concepts of identity and access management, change management, backup & recovery, and security monitoring.