Vulnerability Remediation Lead | Up to 280K Salary

weSource Management Consultancy Firm; Taguig; On-site; PHP 252,000 - 308,000; Full time

Job summary

A leading consultancy firm in Metro Manila is seeking a Vulnerability Remediation Lead to manage the vulnerability management lifecycle. The ideal candidate will possess over 10 years of experience in security, with strong expertise in vulnerability management tools. Key responsibilities include leading a program to assess and address vulnerabilities, collaborating with cross-functional teams, and providing reports to senior management. This position offers a salary of up to 280K and a hybrid work setup.

Qualifications

• 10+ years of relevant experience, with at least 3 years in a leadership role.
• Strong knowledge of Operating Systems (Windows, Linux).
• Ability to communicate effectively with all business levels.

Responsibilities

• Lead the vulnerability management program, including assessment and remediation.
• Collaborate with teams to prioritize vulnerabilities based on severity.
• Generate reports and track remediation progress.

Skills

Vulnerability Management

Threat Intelligence tools

Risk-based approach

Communication

Education

Bachelor's Degree in Computer Science or related field

Tools

Qualysguard

Tenable

Nessus

Cloud environments

Job description

Overview

Vulnerability Remediation Lead | Up to 280K Salary

Job Openings Vulnerability Remediation Lead | Up to 280K Salary

About the job

Job Expectations:

• Employment Type: Full-Time; Permanent (Direct Hire)
• Work Setup & Location: Hybrid - BGC, Taguig
• Work Schedule: Mondays - Fridays, Rotating Shift

Job Description:

As the Vulnerability Management Lead, the candidate should be knowledgeable about supporting the vulnerability management lifecycle (from detection to closure), keeping a risk-based approach throughout. The best candidate will have a security-by-design mindset and understand the importance of building relationships with the wider technology functions to convince them to remediate the identified vulnerabilities and reduce cyber risks to the company.

You will work closely with the Application/Control owners, track remediation progress, and publish metrics to senior management highlighting the vulnerabilities that have not been remediated promptly.

• Execute vulnerability management (VM) processes, guidelines, standards, and metrics.
• Lead the vulnerability management program, including vulnerability scanning, assessment, and remediation.
• Identify and access security vulnerabilities across applications, systems, networks, and Infrastructure through regular scanning and assessments.
• Convincing control owners to remediate/mitigate the vulnerabilities, ensuring they do not impact the business.
• Collaborate with cross-functional teams to identify and prioritize vulnerabilities based on their severity and potential impact.
• Provide technical expertise and guidance on vulnerability management best practices.
• Collaborate with system administrators, developers, and other relevant stakeholders to ensure secure software development practices.
• Build and expand internal relationships with key groups and stakeholders, creating efficiencies for any dependencies.
• Consult teams to resolve issues uncovered by various internal and third-party monitoring tools.
• Investigate and validate reported vulnerabilities from internal and external sources.
• Generate reports and metrics for management on vulnerability assessment findings, progress, and trends.
• Monitor and stay up to date with Industry trends and the latest vulnerabilities and threats
• Apply a structured methodology and lead change management initiatives to create a strategy to support adopting the changes required by a project or initiative.
• Effective implementation of all assigned projects and take complete ownership of the deliverables.
• Other managerial activities that help team and group objectives

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 10+ years of relevant work experience, with at least 3 years in a leadership role.
• Expertise in working with Vulnerability Management/Threat Intelligence tools such as Qualysguard, Tenable, Nessus, Wiz, Symantec, etc.
• Strong knowledge of Operating Systems (Windows, Linux) and Cloud environments.
• Familiarity with ISO 27001, NIST, and other guidelines on information security controls.
• Ability to apply a risk-based approach while working on assigned responsibilities.
• Stays abreast of emerging trends, regulatory changes, and evolving threats in the security and compliance landscape, advising the organization on potential impacts and necessary actions.
• Ability to communicate effectively with all business levels internally and externally.
• Capable of communicating security-related concepts to a broad range of technical and non-technical individuals and understanding new technologies quickly.
• Ability to manage projects working with diverse individuals across multiple geographies.
• Certifications in one or more of the following are a plus: Certified Information Security Auditor (CISA), Certified Information Systems Security, Professional (CISSP), or Certified Information Security Manager (CISM)

***Only shortlisted candidates will be contacted, updating/tailoring CV is recommended***