IT Software Asset Manager and Vulnerability Analyst

Infolob Solutions - Harrisburg, PA

Full-time

Harrisburg, PA

Professional, Scientific, and Technical Services

About the position

The IT Software Asset Manager and Vulnerability Analyst is responsible for leading the IT Software Asset Management Team, managing the agency's hardware inventory and software asset portfolio, and addressing associated risks and vulnerabilities. This role involves software licensing management, risk analysis, and vulnerability management, utilizing various tools to drive risk mitigations and inform key business decisions through executive-level reporting.

Responsibilities

• Streamline the management of software assets to ensure compliance with vendor contracts and determine optimal licensing structure.
• Provide advice and guidance about software product updates and licensing as they impact licensing structures and cost.
• Maintain an accurate software portfolio and hardware inventory throughout an IT asset's lifecycle, from procurement to decommissioning.
• Lead the timely data collection from multiple sources and input into the asset management applications/tools for inventory tracking and analysis.
• Perform licensing compliance analysis and research to remediate compliance issues and support spend optimization.
• Create executive level reports and dashboards to provide an overview of IT hardware and software assets for key business decisions.
• Conduct IT asset inventory reviews with asset owners to validate the accuracy of inventory records.
• Complete analysis and system updates due to new IT asset procurement agreements, licensing, and contract renewals.
• Process IT asset management related service requests via the Agency's ticketing system for software usage and license availability.
• Provide timely analysis and responses to support end of life/support, patch management, risk assessments, and audits.
• Create and maintain IT asset related documentation and process procedures for audit inquiries and business continuity.
• Evaluate internal controls and policies for potential weaknesses and recommend updates to reduce risks.
• Identify vulnerabilities and risks to develop strategies to strengthen system security.
• Understand and document the business criticality of each asset to support business continuity and security posture.
• Analyze data to maintain quarterly inventory lists for compliance requirements.
• Provide guidance to the Enterprise Security Office for Nessus scanning and configuration needs.
• Assist in building and maintaining roadmaps for the Vulnerability Management Workflow.
• Participate in external and internal audit reviews and compliance inquiries.

Requirements

• Bachelor's degree in computer science or related field.
• 2-4 years of experience with enterprise asset management applications/tools.
• Experience with IT contract management and IT Operations on an enterprise scale.
• Solid experience maintaining the lifecycle of asset inventory records.
• Experience remediating licensing compliance deviations.
• Experience publishing and auditing asset and spend optimization reports.
• Proven ability to maintain an accurate software portfolio and hardware inventory throughout an IT asset's lifecycle.
• Ability to interpret software contracts and licensing compliance requirements.
• Experience with vulnerability management tools, such as Tenable-Nessus.
• Proven ability to create reports and dashboards for compliance and audit requests.
• Experience creating and maintaining documentation for business processes and audit requirements.
• Proficient with MS Office Products and experience with SharePoint.
• Strong written and verbal communication skills.
• Demonstrated analytical, critical thinking, and organizational skills.
• Interpersonal skills to support agency initiatives and teamwork.