Ameris Bank is a purpose-driven company, dedicated to bringing financial peace of mind to communities, one person at a time. Whether a customer wants to grow their business, buy a home, or feel confident in their retirement plan, they have a partner in Ameris Bank. We serve customers in our locations across the Southeast, Mid-Atlantic and nationwide through our extensive digital offerings and mobile app.

Delivering financial peace of mind starts with a team that values integrity and rewards ingenuity. At Ameris, you’ll find teammates who are inclusive, collaborative problem-solvers who go the extra mile to support one another and to meet every customer’s needs. When teammates are empowered and bring their diverse perspectives to the table, we create the best possible outcomes for our customers. At Ameris, we know that a growth mindset is key for high performance and fosters an environment that prioritizes continuous improvement. Teammates have access to Employee Resource Groups that serve as advocates and allies as well as professional development opportunities to drive ongoing education. Learn more about our purpose and how you can bring it to life as an Ameris Bank teammate.

Responsible for leading vulnerability assessments, managing the vulnerability system, prioritizing remediation efforts, and ensuring the security of systems and data. This position will play a key role in ensuring resilient business operations and system security through information sharing and remediation guidance of IT systems of vulnerabilities. Responsible for overseeing the lifecycle of IT assets within the organization. This includes procurement, deployment, maintenance, and disposal of hardware and software assets. The position ensures that all IT assets are efficiently managed, tracked, and optimized to support the company’s operational goals. Accountable for Configuration Management (CMDB) to help prevent issues with configuration drift, security exposures, and system outages by maintaining consistent and accurate configurations.

Essential Functions, Duties, and Responsibilities:

·     Manage operations vulnerability remediation team and provide guidance and mentorship to team members and other IT staff on vulnerability management practices.

·     Lead and execute vulnerability assessments across all IT systems and applications.

·     Identify, classify, and prioritize vulnerabilities, ensuring timely and effective remediation.

·     Assess ongoing vulnerability scans to identify security weaknesses.

·     Collaborate with cross-functional teams to develop and implement vulnerability solutions.

·     Analyze vulnerability data, produce detailed reports, and present findings to IT and Security teams.

·     Stay current with the latest vulnerability trends, security news, and industry best practices.

·     Develop and maintain documentation for vulnerability management processes and procedures.

·     Reviews procedures and methods for continual security monitoring & threat response.

·     Participates in periodic review of cyber security controls and supporting processes.

·     Responds to and investigates security anomalies and events with appropriate teams.

·     Drives innovation through identifying technical solutions to better recognize and respond to threats.

·     Works with Cyber Security Engineers to evaluate the organization to ensure compliance with standards and relevance with industry security norms.

·     Manage & configure scheduled vulnerability scans and cloud agent deployment.

·     Provide risk consulting and prioritization on identified confirmed and potential vulnerabilities.

·     Provide vulnerability exception reporting for Risk Management Exception processes.

·     Hold periodic vulnerability management status meetings with Technology Infrastructure teams.

·     Provide periodic meeting notes for vulnerability management status meetings.

·     Communicate vulnerability remediation SLAs and drive prioritization across departments.

·     Manage and add dashboards and reporting on vulnerability management.

·     Calculate monthly vulnerability management metrics for SecOps Reporting.

·     Manage assets identified within the vulnerability scanning platform.

·     Manage asset tagging and ensure new tags are added correctly.

·     Manage adding and removing users from the vulnerability management platform.

Required Knowledge, Skills and Competencies:

·     Excellent oral and written communication skills.

·     Should possess a proactive mindset and be comfortable driving remediation activities among various teams.

·     Takes a professional approach relating to others, treats others with consideration and respect regardless of employee level.

·     Ability to adapt and manage frequent change, delays or unexpected events.

·     Knowledge of Information Technology systems security methods and procedures.

·     Knowledge of methods for evaluating, implementing, and disseminating IT security procedures

·     Experience with security frameworks and standards (e.g., NIST, CIS) to guide & inform vulnerability reporting.

·     Proficiency in scripting languages (e.g., Python, PowerShell) for automation of security tasks.

·     Understands network protocols, operating systems, and IT architectures.

·     Strong analytical and problem-solving skills.

·     Ability to communicate complex security concepts to technical and non-technical audiences.

Industry and Work Experience:

·     Minimum of 5 years of experience in IT or Security, with a focus on vulnerability management. Strong knowledge of vulnerability assessment tools and technologies (e.g., Nessus, Qualys, Rapid7). Preferred candidate is a Qualys expert.

·     Minimum (5) years of progressive information technology experience.

·     Experience with common vulnerability scanning platforms. Qualys is preferred.

·     Experience with ITAM / Configuration Management platforms.

·     Experience with Atlassian Jira preferred.

Academic:

·     High school diploma or GED required.

·     Bachelor’s degree in, Computer Science, Information Technology, Cybersecurity, or a related field strongly preferred.

·     Relevant IT and Security certifications are desirable.

Benefits Available to Employees:

Ameris Bank provides a comprehensive employee benefit package to all eligible employees.

Medical, Dental and Vision Insurance Ameris Bank absorbs a major portion of the cost of healthcare. You become eligible for coverage on the first of the month following 30 days of employment Life Insurance provided at no additional cost to employees Accidental Death & Dismemberment Coverage Long-Term Disability Coverage Paid Sick and Vacation Leave 11 Holidays Volunteer/Service Day Employee Stock Purchase Plan 401(k) Retirement Plan Ameris Bank matches 50% of your first 8% of contributions to the plan Flexible Spending Accounts Health Savings Account Health Reimbursement Arrangement Supplemental Life & Other Insurance Plans Identity Theft Protection Pet Insurance Legal Insurance Employee Assistance Program Employee Advocacy Program  Tickets at Work (Entertainment discounts for Ameris Bank Employees) AT&T Employee Discount Wellness Discounts for Medical Premiums and Other Rewards  Employee Referral Incentive Education Assistance Employee Resource Groups

Banking Advantages for Employees:

In addition to a wide array of benefits, Ameris Bank employees are also eligible for special bank services.

Free Interest Checking Free Safe Deposit Box Free Money Orders, Travelers’ Checks and Cashier Checks Discount on Mortgage Origination Fee Free Online Banking and Free Unlimited Online Bill Payment Employee Banking Perks

Disclaimer:

The above job description is meant to describe the general nature and level of work being performed; it is not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required for the position.

All job requirements are subject to possible modification to reasonably accommodate individuals with disabilities. Some requirements may exclude individuals who pose a direct threat or significant risk to the health and safety of themselves or other employees.