Vulnerability Scanning Analyst (Global Security)

What is the opportunity

As a Vulnerability Scanning Analyst you will be responsible for conducting security scans identifying vulnerabilities and working with internal teams to mitigate risks across RBCs digital ecosystem. You will collaborate with cybersecurity IT and business stakeholders to ensure that RBCs infrastructure remains secure and resilient. Your expertise in security scanning tools and risk analysis will be key to strengthening RBCs security posture.

What will you do

• Perform regular vulnerability scanning across RBCs cloud and on-premises environments to identify potential security threats.
• Analyze scan results prioritize vulnerabilities and work with IT and security teams to ensure timely remediation.
• Collaborate with cross-functional teams to integrate vulnerability management best practices into development and deployment pipelines.
• Develop and maintain standard operating procedures (SOPs) for vulnerability scanning and assessment.
• Generate detailed security reports track remediation efforts and present findings to management.
• Continuously enhance scanning techniques improve automation processes and stay informed about the latest cybersecurity threats.
• Support regulatory and compliance requirements by ensuring security scanning aligns with industry frameworks (e.g. NIST ISO 27001 PCI-DSS).

What do you need to succeed

Must-have:

• 2 years of experience in vulnerability scanning security analysis or IT risk management.
• Hands-on experience with security scanning tools such as Tenable Nessus Qualys Rapid7 Aqua Security or similar platforms.
• Strong understanding of network security system hardening and cybersecurity frameworks.
• Knowledge of cloud security principles (AWS Azure GCP) and container security.
• Experience in analyzing vulnerabilities and providing remediation recommendations.
• Excellent analytical and problem-solving skills with the ability to interpret complex security data.
• Effective communication and collaboration skills to work with technical and non-technical teams.

Nice-to-have:

• Security certifications such as CISSP CEH Security or GIAC GSEC.
• Familiarity withDevSecOpspractices and integrating security into CI/CD pipelines.
• Experience working in financial services or a highly regulated industry.
• Proficiency in scripting languages (Python PowerShell Bash) for automation.

Whats in it for you

We thrive on the challenge to be our best progressive thinking to keep growing and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other reaching our potential making a difference to our communities and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits competitive compensation commissions and stock where applicable.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic collaborative progressive and high-performing team.
• A world-class training program in financial services.

#LI-POST

#TECHPJ

Job Skills

Additional Job Details

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Inclusion and Equal Opportunity Employment

At RBC we believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best effectively collaborate drive innovation and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect belonging and opportunity for all.