About This Role
Directing the execution, governance, and continuous evolution of the enterprise server and endpoint vulnerability management program is the core of this role. It suits a security leader who can drive risk identification and reduction in a complex hybrid environment spanning on-prem and cloud infrastructure, translating security objectives to various stakeholders.
Responsibilities
- Lead day-to-day operations of the enterprise vulnerability management program supporting servers, endpoints, and infrastructure services
- Partner with infrastructure, cloud, endpoint, application, and product technology teams to drive remediation planning and execution
- Oversee vulnerability assessment platforms and associated technologies
- Identify and implement automation opportunities that improve vulnerability discovery, prioritization, and reporting
- Support and execute strategic initiatives that improve vulnerability identification, prioritization, remediation, and reporting capabilities
- Support and develop risk-based vulnerability management methodologies incorporating exploitability, threat intelligence, asset criticality, business impact, and exposure factors
- Drive continuous improvement initiatives that increase effectiveness, automation, operational efficiency, and program maturity
- Lead and mentor a high-performing team of analysts within the CVM program
- Foster a culture of accountability, collaboration, innovation, and continuous improvement
- Collaborate and partner with peer leaders within the team to drive cross-functional program initiatives
- Build partner relationships with key stakeholders
- Develop executive dashboards, KPIs, KRIs, and scorecards
- Present vulnerability trends, remediation performance, and risk posture to senior leadership
- Translate technical findings into business-focused risk communications
- Support audits, regulatory assessments, and compliance reviews
Requirements
- Bachelor's degree or equivalent experience
- 8+ years cybersecurity/infrastructure security experience
- 5+ years' experience leading enterprise-scale vulnerability management programs
- Relevant certifications such as CISSP, CISM, or equivalent experience
- Expertise with managing server hosts (Windows, Linux) in a hybrid environment including public cloud platforms (AWS, Azure, GCP)
- Experience with security platforms such as Qualys, Wiz, CrowdStrike, etc.
- Experience with custom reporting using database platforms/tools and reporting visualization tools such as Grafana or Power BI
Benefits
- Medical, Dental, Vision, Life Insurance