Vulnerability Management Director
RemoteUnited States
Job Summary
Lead the company's Vulnerability Management program as the subject matter expert across a global technology infrastructure including legacy systems and modern cloud environments. Develop and enforce enterprise-wide policies and technical standards focused on vulnerability management and secure configurations. Oversee the complete lifecycle of vulnerability remediation, including those identified through vulnerability scans, penetration tests, application scans, and responsible disclosure programs. Collaborate with Security and IT teams to assess the potential impacts of vulnerabilities and recommend security controls tailored to the organization's specific environment. Propose and implement strategies to manage and mitigate vulnerabilities, reducing risks to levels acceptable to senior management. Foster strong relationships with technical teams to ensure agile and effective vulnerability management practices, especially within cloud platforms. Act as an advocate for vulnerability management and cybersecurity, promoting awareness, best practices, and integration across various business units. Provide technical expertise, guidance, and support to team members in vulnerability assessments. Continuously improve and develop KPIs and metrics to measure the effectiveness of the vulnerability management program. Lead or participate in new projects as required.
Required Qualifications
- Proven experience leading vulnerability management teams
- deep knowledge of security concepts and strategies
- track record of successful implementation
- Hands-on experience with vulnerability management tools
- strong technical understanding of assessing and identifying vulnerabilities across various operating systems, databases, and application servers
- Excellent written and verbal communication skills
- ability to collaborate effectively across all business functions
- strong ability to understand and communicate risk-related issues and technical challenges to various teams
- Leadership skills that inspire and bring out the best in both direct reports and cross-functional teams
- Over 6 years of experience in a vulnerability management role
- ability to assess, prioritize, and drive remediation activities
- Exceptional communication and interpersonal skills
- capability to clearly articulate complex technical and business concepts to peers, IT leadership, and management
- Expertise in reporting gaps in ways that highlight business risks
- providing technical solutions for remediation to operations teams
- Experience interacting with auditors and regulators
- working across hybrid cloud and on-premises infrastructures
- Experience with large-scale vulnerability scanning technologies
- Self-motivated with the ability to make independent decisions
- judgment to seek guidance when necessary
- solid understanding of the balance between risk and severity
- ability to work effectively in a diverse technology environment spanning multiple operating systems and architectures
- Strong ability to build collaborative and open working relationships with technology and other stakeholders
- In-depth understanding of security issues and risks at the enterprise, network, system/endpoint, and application levels
- Bachelor's degree in Computer Science or a related field
- equivalent work experience
- Typically, a minimum of ten years' relevant experience in Information Technology
- Change Management/Configuration Management
- Vulnerability Scanning
- Information Security
- Leadership
- Controls and Compliance
Desired Qualifications
- Understanding Business Requirements
- Metrics Development
- Self-Starter Attitude
- Database Management
- Excellent Written and Verbal Communication
- Subject Matter Expertise
- Remediation Processes
- Operations Management
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.