Vulnerability Management Manager

Vertiv

Mandaluyong

On-site

PHP 1,800,000 - 2,800,000

Full time

36 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Vertiv is seeking a Vulnerability Manager to lead the organization’s vulnerability management program, aligning with risk appetite and regulatory obligations. The role engages with Security Operations, IT Infrastructure, Cloud Engineering, and executives to drive risk reduction.

The ideal candidate will possess strong leadership, deep technical expertise in vulnerability assessment and remediation, and a track record of influencing stakeholders to achieve measurable risk reductions.

Qualifications

6–10 years in Information Security with 3+ years in vulnerability management leadership.
Experience leading an enterprise vulnerability management program.

Responsibilities

Own and lead end-to-end vulnerability management program strategy, governance, and execution.
Define and maintain policies, standards, and SLAs for vulnerability management.
Drive remediation across IT and business units with defined SLAs.
Lead and develop the vulnerability management team.
Communicate risk, remediation priorities, and program status to executives.

Skills

Leadership

Vulnerability mgmt

Risk-based prioritization

CVSS

Automation

Cloud & Hybrid

Stakeholder management

Scripting

ISO 27001

Education

CISSP

CISM

GIAC Vulnerability Assessment

CompTIA CySA+

Tools

Vulnerability Scanners

CMDB

SIEM

ITSM

Automation tools

Job description

Join a High-Performance Culture That Drives Innovation and Excellence At Vertiv, we don’t just hire talent—we cultivate leaders who drive innovation and engage teams to push the limits of what’s possible. As a global leader in critical digital infrastructure, we are scaling up to meet the demands of AI, data centers, and next-gen technology—and we need bold, high-performing individuals like YOU to take us to the next level.

Why Vertiv?

High-Performance Culture: We empower you to think big, execute with excellence, and deliver impact. Our performance-driven mindset rewards those who challenge the status quo and drive meaningful change. Over 50 CEO Awards are given annually to recognize top talent moving the needle forward.
Leadership Without Limits: Leadership at Vertiv goes beyond just titles—it’s about accountability, trust, and ownership. Our leaders engage and drive with collaboration, innovation, and customer-centric thinking, setting the foundation for an action-focused culture.
Limitless Growth & Learning: We believe in continuous development. Whether through rotational programs or high-impact projects, you’ll have the opportunity to expand your expertise and grow your career.
A Place for Everyone:Our commitment to inclusion ensures that all employee’s unique strengths and perspectives are valued. Your voice matters, your growth is prioritized, and your success is celebrated.

POSITION SUMMARY

The Vulnerability Manager is responsible for leading and overseeing the organization's vulnerability management program, ensuring the timely identification, assessment, prioritization, and remediation of security vulnerabilities across the enterprise environment. This role is accountable for defining vulnerability management strategy, establishing governance frameworks, driving cross-functional remediation efforts, and providing executive-level visibility into the organization's vulnerability posture.

The Vulnerability Manager works closely with Security Operations, IT Infrastructure, Application Development, Cloud Engineering, Risk Management, and senior leadership to ensure vulnerabilities are systematically managed in alignment with the organization's risk appetite and regulatory obligations. The ideal candidate possesses strong leadership capabilities, deep technical expertise in vulnerability assessment and remediation, and the ability to influence stakeholders at all levels to drive measurable risk reduction.

KEY RESPONSIBILITIES

Program Leadership & Strategy

Own and lead the end-to-end vulnerability management program, including strategy, governance, policies, and operational execution
Define and maintain vulnerability management policies, standards, procedures, and SLAs aligned with industry frameworks and organizational risk appetite.
Establish and continuously improve vulnerability management workflows, playbooks, and escalation procedures.
Drive the maturity of the vulnerability management program through adoption of risk-based prioritization frameworks, automation, and integration with broader security operations
Report on program performance, risk posture, and strategic initiatives to senior leadership and executive stakeholders.

Vulnerability Assessment & Analysis

Oversee the execution of regular vulnerability scans across infrastructure, endpoints, applications, cloud environments, and third-party assets
Ensure accurate analysis and validation of scan results, including the identification of true positives, elimination of false positives, and assessment of exploitability and business impact.
Direct deeper technical analysis on complex, critical, or high-risk vulnerabilities, including correlation with threat intelligence and exploit activity.
Evaluate and implement risk-based prioritization methodologies (e.g., CVSS, EPSS, SSVC) to ensure remediation efforts are focused on the highest-risk exposures.

Remediation Governance & Coordination

Drive and coordinate remediation activities across IT Infrastructure, Application Development, Cloud Engineering, and business units, ensuring accountability and adherence to defined SLAs
Establish remediation tracking mechanisms, escalation paths, and exception management processes for vulnerabilities that cannot be immediately addressed.
Approve and oversee compensating controls, risk acceptances, and remediation deferrals in alignment with the organization's risk management framework
Validate remediation effectiveness through re-scanning, verification, and closure processes.

Team Leadership & Development

Lead, mentor, and develop the vulnerability management team, including Level 1 and Level 2 analysts.
Define roles, responsibilities, and performance expectations for team members.
Foster a culture of continuous learning, technical excellence, and proactive security within the team.
Identify skill gaps and drive training, certification, and professional development initiatives.

Stakeholder Engagement & Communication

Serve as the primary point of contact for vulnerability management matters across the organization.
Communicate vulnerability risks, remediation priorities, and program status to technical teams, business leaders, and executive management.
Build and maintain strong relationships with asset owners, system administrators, and business unit leaders to ensure collaboration and accountability.
Coordinate with Threat Intelligence, Penetration Testing, and Security Operations teams to align vulnerability findings with broader security initiatives and threat landscape developments.

Governance, Risk & Compliance

Ensure the vulnerability management program meets regulatory, audit, and compliance requirements.
Provide evidence of vulnerability management controls, scan results, remediation status, and risk acceptances for audit and compliance activities.
Identify systemic vulnerability trends and recommend strategic improvements to reduce the organization's attack surface. Align vulnerability management practices with relevant frameworks and standards (e.g., ISO/IEC 27001:2022, NIST CSF, CIS Controls).

Metrics, Reporting & Continuous Improvement

Define, track, and report key vulnerability management metrics, including mean time to remediate (MTTR), scan coverage, SLA adherence, vulnerability aging, and risk reduction trends.
Develop and maintain executive dashboards and reports to provide visibility into the organization's vulnerability posture.
Lead continuous improvement initiatives to enhance vulnerability detection, prioritization, remediation, and reporting capabilities.
Evaluate emerging tools, technologies, and methodologies to strengthen the vulnerability management program.
Stay current on emerging vulnerabilities, exploit techniques, threat landscape developments, and industry best practices.

QUALIFICATIONS

Experience

6–10 years of experience in Information Security, with at least 3 years in a vulnerability management or security operations leadership role.
Proven experience leading and managing a vulnerability management program in an enterprise environment.
Demonstrated experience in cross-functional coordination, driving remediation across diverse IT and business teams.
Experience with vulnerability management in hybrid environments (on-premises, cloud, and multi-cloud) is strongly preferred.

Technical Skills

Deep understanding of vulnerability assessment methodologies, CVSS scoring, and risk-based prioritization frameworks (e.g., EPSS, SSVC). Strong knowledge of networking protocols, operating systems (Windows, Linux), cloud platforms, and common enterprise technologies.
Experience with enterprise vulnerability scanning platforms and their configuration, tuning, and integration.
Familiarity with asset management, CMDB, ITSM, and SIEM platforms for vulnerability correlation and enrichment.
Understanding of common vulnerability types (e.g., OWASP Top 10, CWE/SANS Top 25), exploit techniques, and attack vectors.
Scripting and automation skills (e.g., Python, PowerShell, Bash) for scan automation, data analysis, and reporting.
Knowledge of patch management processes, change management workflows, and configuration management practices.

Soft Skills

Strong leadership and people management skills with the ability to build, motivate, and develop high-performing teams.
Excellent communication and presentation skills, with the ability to convey complex technical risks to executive and non-technical audiences.
Strategic thinking with the ability to balance tactical execution and long-term program maturity.
Strong stakeholder management and influencing skills, with the ability to drive accountability across teams without direct authority.
Proactive, results-oriented mindset with a commitment to continuous improvement.

Certifications

CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
GIAC Vulnerability Assessment (GEVA) or GIAC Certified Enterprise Defender (GCED)
CompTIA CySA+ (Cybersecurity Analyst)
Relevant vendor-specific certifications in vulnerability management platforms
Other advanced cybersecurity certifications

The successful candidate will embrace Vertiv’s Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPALS:

Safety. Integrity.Respect. Teamwork. Diversity & Inclusion.

OUR STRATEGIC PRIORITIES