AVP Vulnerability Management Program Manager
- Compensation
- Not disclosed
- Location
- Operations Center
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business Administration, Risk Management, or a related field, or an equivalent combination of education and relevant experien
- Seven or more years of progressive experience in cybersecurity, information security, technology risk, technology operations, or a related discipline.
- Three or more years of experience leading vulnerability management, cyber risk, security operations, governance, or comparable enterprise programs.
- Demonstrated experience coordinating cross-functional remediation or risk-reduction initiatives in a complex technology environment.
- Working knowledge of vulnerability assessment, risk-based prioritization, remediation governance, exception management, validation, metrics, and evidence practices.
- Experience communicating technical risk, program performance, and decisions to management and non-technical stakeholders.
- Strong written communication, facilitation, organization, analytical judgment, and stakeholder management skills.
Full description
Address
We’re always looking for bright individuals to join our growing organization. As a part of the First Financial Family, we will invest in your development and provide a dynamic work environment where you’re challenged, valued and empowered every day. We strive to be the best destination for the industry’s top talent, creating a diverse, collaborative workplace that celebrates innovation and change. We are one team, working together to get things done.
Job Description:
Office Location:
Abilene, Texas, United States
ROLE SUMMARY
The Assistant Vice President, Vulnerability Management Program Manager leads the ongoing administration, governance, and continuous improvement of First Financial Bankshares' enterprise Vulnerability Management Program. This role ensures vulnerabilities are identified, prioritized, tracked, remediated, validated, reported, and evidenced in accordance with approved standards, risk management expectations, and applicable regulatory requirements.
The position provides dedicated program leadership across Information Security, technology operations, application teams, risk management, Internal Audit, third-party providers, and other stakeholders. The role translates technical exposure into clear business risk, drives remediation accountability, coordinates governance and reporting, and helps maintain a sustainable and demonstrably effective program.
KEY RESPONSIBILITIES
Program Leadership & Governance
- Lead the day-to-day administration and ongoing maturity of the enterprise Vulnerability Management Program.
- Maintain the program roadmap, governance documentation, operating procedures, standards alignment, and recurring review activities.
- Coordinate the Vulnerability Management Council, including agendas, decisions, action items, escalations, and follow-through.
- Promote consistent execution of program requirements across technology functions, support organizations, and applicable business units.
Risk-Based Vulnerability Oversight
- Oversee the vulnerability lifecycle from identification and validation through prioritization, remediation, exception management, risk acceptance, and closure.
- Ensure prioritization considers exploitability, asset criticality, business impact, exposure, and other approved risk factors.
- Monitor aging, overdue items, recurring issues, and material exposure; coordinate timely escalation and corrective action.
- Provide oversight of vulnerabilities affecting internally managed, jointly managed, and vendor-managed technology environments.
Remediation Coordination & Accountability
- Coordinate remediation activity across infrastructure, endpoints, networks, applications, databases, cloud services, and third-party technology providers.