Lead the design, implementation, and continuous improvement of the enterprise vulnerability management program.
Oversee vulnerability scanning, assessment, and reporting processes for all critical assets.
Collaborate with IT, DevOps, and application teams to prioritize and track remediation efforts.
Develop and deliver metrics, dashboards, and executive reports on vulnerability status and risk trends.
Ensure compliance with internal policies, industry standards, and regulatory requirements related to vulnerability management.
Coordinate vulnerability disclosure and response activities, including communication with external vendors and stakeholders.
Provide guidance, training, and awareness to technical teams on vulnerability management best practices.

Requirements

Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience).
5+ years of experience in information security, with at least 2 years dedicated to vulnerability management.
Proficiency with industry-standard vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7) and remediation tracking platforms.
Demonstrated expertise in applying security frameworks and industry standards such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, and PCI DSS.
Familiarity with vulnerability management best practices, including risk prioritization, patch management processes, and threat intelligence integration.
Relevant certifications preferred, such as CISSP, CISM, OSCP, GIAC, or equivalent credentials.
Excellent communication, analytical, and project management skills.

Benefits

Health insurance
401(k) matching
Annual bonus incentive plan
Comprehensive benefits package

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementvulnerability scanningrisk prioritizationpatch managementthreat intelligence integrationmetrics developmentdashboard creationreportingsecurity frameworkscompliance

Soft Skills

communicationanalytical skillsproject managementcollaborationguidancetrainingawareness

Certifications

CISSPCISMOSCPGIAC