Information Security Vulnerability Management Lead

Create a robust proactive approach for preventing unauthorized access, changes, or exploitation of vulnerabilities through mitigation, active defenses, and automated responses. The VM team’s portfolio of activities includes providing vulnerability detection and remediation oversight, vulnerability research, secure baseline compliance, web application security, host-based security, network security, and acting as security subject matter experts for all of the organization.

VM Lead Competencies:

• Extensive knowledge and hands-on experience with a variety of Vulnerability Management Tools such as Tenable, DB Protect, Netsparker, Qualys, etc.
• Expert knowledge of the Vulnerability Management lifecycle
• Proven track record of designing, implementing, and managing a Fortune 100 level Vulnerability Management Program
• Strong knowledge of cybersecurity operations (Cyber Threat Intelligence, Penetration testing, & Incident Response)
• Track record of leading enterprise-level vulnerability management teams with a history of increasing responsibility
• Expertise in developing and improving vulnerability management operations and processes
• Proactive disposition and ability to execute on leadership vision with minimal oversight

Responsibilities

• Lead the redesign, build and day-to-day operations of the vulnerability management (VM) team to include standardization of processes and managing customer expectations.
• Effectively manage a team of vulnerability management professionals who are focused on proactively preventing the exploitation of IT vulnerabilities that exist across the
• Drive actionable metrics which help ensure the team reduce the time and resources needed to detect, investigate, analyze and remediate vulnerabilities.
• Provide Subject Matter Expert support and guidance to Information Security Systems Officers (ISSO), System Owners and others as needed through the risk management process and secure configuration baseline management, including regulatory and remediation compliance monitoring.

Minimum Qualifications

• Bachelor of Arts (B.A.) or Bachelor of Science (B.S.) degree, preferably in Computer Science, Information Technology, Electrical Engineering, or related field.
• 12 or more years of professional work experience in cybersecurity with at least 5 years in Vulnerability Management.
• 3 or more years managing\supervising a team of vulnerability management professionals.
• Information Security-related certification(s) such as GPEN, GEVA, CISSP, etc.
• Must be a US Citizen with the ability to pass a security clearance\background investigation.

INDPIT