Role summary
Lead the organization's Vulnerability Management program and strategy. Oversee vulnerability scanning, assessment, prioritization, and remediation activities. Monitor remediation progress and enforce agreed SLAs. Coordinate with IT, Cloud, Infrastructure, Application, and Security teams to address vulnerabilities. Manage critical and zero-day vulnerability response activities. Develop KPIs, dashboards, and executive reports on vulnerability risk and remediation status. Support audits, compliance assessments, and cybersecurity governance requirements. Lead and mentor the Vulnerability Management team and manage relevant vendors.
Responsibilities
- Lead the organization's Vulnerability Management program and strategy
- Oversee vulnerability scanning, assessment, prioritization, and remediation activities
- Monitor remediation progress and enforce agreed SLAs
- Coordinate with IT, Cloud, Infrastructure, Application, and Security teams to address vulnerabilities
- Manage critical and zero-day vulnerability response activities
- Develop KPIs, dashboards, and executive reports on vulnerability risk and remediation status
- Support audits, compliance assessments, and cybersecurity governance requirements
- Lead and mentor the Vulnerability Management team
- Manage relevant vendors
Qualifications
- Bachelor's degree in Cybersecurity, IT, Computer Science, or related field
- 8+ years of cybersecurity experience
- 4+ years in Vulnerability Management or Security Operations
- Hands-on experience with Tenable, Qualys, Rapid7, Microsoft Defender, or similar tools
- Strong understanding of vulnerability management, risk management, cloud security, and patch management
Education
Bachelor's degree in Cybersecurity, IT, Computer Science, or related field
Experience
8+ years of cybersecurity experience, including 4+ years in Vulnerability Management or Security Operations
Skills
- Tenable
- Qualys
- Rapid7
- Microsoft Defender
- Vulnerability Management
- Risk Management
- Cloud Security
- Patch Management