Director, Enterprise Vulnerability & Exposure Management

Jobtailor; Deutschland; Remote; EUR 140.000 - 210.000; Vollzeit

Zusammenfassung

Danaher is seeking a senior CTEM leader to operationalize and govern a global vulnerability and exposure management program. You will shape strategy, build scalable governance, and drive executive reporting across the enterprise.

You will mobilize remediation across infrastructure, cloud, applications, and third parties, design prioritization logic, and integrate VM with attack surface management and cloud security posture. Collaborate with cross‑functional teams and report to the Global CISO.

Qualifikationen

• 14+ years of cybersecurity experience focused on vulnerability/exposure management.

Aufgaben

• Operationalize and drive Danaher’s CTEM program.
• 0

Kenntnisse

Cybersecurity Experience

Vulnerability Management

Exposure Management

CTEM Strategy

Executive Reporting

Remediation Mobilization

Asset Criticality Analysis

Cloud Security

Governance Frameworks

Risk-Based Prioritization

Security Tool Integration

Ausbildung

Bachelor’s degree in Cybersecurity/CS/IT

CISSP/CISM/CRISC (plus)

Tools

Tenable

Qualys

Rapid7

Wiz

Defender

Jobbeschreibung

• Operationalize and drive Danaher’s global vulnerability and exposure management (CTEM) program
• Shape and refine enterprise vulnerability and exposure management strategy
• Build a sustainable capability covering governance, risk-based prioritization, validation, metrics, and executive reporting
• Mobilize remediation owners across infrastructure, cloud, application, and third-party teams
• Architect the CTEM operating model covering scope, discovery, prioritization, validation, and remediation mobilization across the enterprise attack surface
• Design prioritization logic combining asset criticality, exploitability, exposure path, controls, and business impact beyond raw CVSS
• Set the integration blueprint across vulnerability management, attack surface management, cloud posture, red team/offensive testing, and remediation/ticketing tools
• Design the sustainability and governance model, including remediation SLAs, exception governance, service ownership, and metrics framework
• Report to the Danaher Global Chief Information Security Officer

Requirements

• 14+ years of cybersecurity experience with a focus on vulnerability, exposure, or threat exposure management (GCRF P5 Bachelor’s-track minimum; recommended, pending Comp sign-off)
• Experience leading enterprise or global vulnerability/exposure management or CTEM strategy, governance, and remediation across multiple business units
• Experience with enterprise vulnerability/exposure platforms such as Tenable, Qualys, Rapid7, Wiz, or Defender
• Risk-based prioritization using threat intelligence and asset context
• Experience working independently to mobilize remediation across infrastructure, cloud, application, and third-party owners
• Experience reporting exposure risk to executive stakeholders
• Experience integrating VM with attack surface management and cloud security posture is a plus
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field is a plus
• CISSP, CISM, or CRISC is a plus

Core Competencies

Demonstrates extensive expertise in driving global vulnerability and exposure management strategies, with a strong focus on governance, risk-based prioritization, and executive reporting. Proficient in mobilizing remediation efforts across diverse teams and integrating various security management tools.

Highest-signal resume keywords

• Cybersecurity Experience
• Vulnerability Management Strategy
• Risk-Based Prioritization
• Executive Reporting
• Integration of Security Tools

ATS Optimization Keywords

Hard Skills

• Vulnerability Management
• Exposure Management
• Threat Exposure Management
• Governance Frameworks
• Risk Assessment
• Metrics Development
• Remediation Mobilization
• Asset Criticality Analysis
• Prioritization Logic Design
• Cloud Security Posture

Soft Skills

• Leadership
• Collaboration
• Communication

Certifications & Qualifications

• CISSP
• CISM
• CRISC

Industry Keywords

• Cybersecurity
• Risk Management
• Governance
• Executive Stakeholders
• Attack Surface Management

Tools & Technologies

• Tenable
• Qualys
• Rapid7
• Wiz
• Defender