Manager Vulnerability Management I

POSITION SUMMARY

The Vulnerability Manager is responsible for leading and overseeing the organization's vulnerability management program, ensuring the timely identification, assessment, prioritization, and remediation of security vulnerabilities across the enterprise environment. This role is accountable for defining vulnerability management strategy, establishing governance frameworks, driving cross-functional remediation efforts, and providing executive-level visibility into the organization's vulnerability posture.

The Vulnerability Manager works closely with Security Operations, IT Infrastructure, Application Development, Cloud Engineering, Risk Management, and senior leadership to ensure vulnerabilities are systematically managed in alignment with the organization's risk appetite and regulatory obligations. The ideal candidate possesses strong leadership capabilities, deep technical expertise in vulnerability assessment and remediation, and the ability to influence stakeholders at all levels to drive measurable risk reduction.

RESPONSIBILITIESProgram Leadership & Strategy

• Own and lead the end-to-end vulnerability management program, including strategy, governance, policies, and operational execution

• Define and maintain vulnerability management policies, standards, procedures, and SLAs aligned with industry frameworks and organizational risk appetite.

-
Establish and continuously improve vulnerability management workflows, playbooks, and escalation procedures.

Drive the maturity of the vulnerability management program through adoption of risk-based prioritization frameworks, automation, and integration with broader security operations

• Report on program performance, risk posture, and strategic initiatives to senior leadership and executive stakeholders.

Vulnerability Assessment & Analysis

• Oversee the execution of regular vulnerability scans across infrastructure, endpoints, applications, cloud environments, and third-party assets

• Ensure accurate analysis and validation of scan results, including the identification of true positives, elimination of false positives, and assessment of exploitability and business impact.

• Direct deeper technical analysis on complex, critical, or high-risk vulnerabilities, including correlation with threat intelligence and exploit activity.

-
Evaluate and implement risk-based prioritization methodologies (e.g., CVSS, EPSS, SSVC) to ensure remediation efforts are focused on the highest-risk exposures.

Remediation Governance & Coordination

• Drive and coordinate remediation activities across IT Infrastructure, Application Development, Cloud Engineering, and business units, ensuring accountability and adherence to defined SLAs