Senior Vulnerability Manager

Govern the end-to-end vulnerability management lifecycle, including intake, scanning, triage, risk scoring, remediation orchestration, and verification. Apply CVSS, EPSS, and CISA KEV signals for risk-based prioritization while codifying triage logic into policy, SOPs, and dashboards. Enforce remediation SLAs, manage risk acceptances and time-bound exceptions, and report exception aging trends to leadership. Design, administer, and optimize enterprise vulnerability scanners across infrastructure, cloud, container, and application layers, integrating scan results into ITSM workflows. Implement and maintain automated patching capabilities for server, endpoint, and cloud workloads, validating success rates and driving MTTR reduction aligned to NIST SP 800-40r4. Collaborate with Threat Intelligence and Incident Response to adjust priority queues based on active exploitation, KEV entries, and zero-day disclosures. Partner with IT/Cloud Ops and Product teams to integrate patch and mitigation planning into CI/CD and infrastructure-as-code pipelines. Maintain executive-ready metrics covering exposure, SLA adherence, backlog, and asset coverage to deliver regular status narratives to Directors and Vice Presidents. Serve as a technical resource and mentor for less experienced team members while maintaining program evidence in audit-ready condition for compliance reviews.