Director of Enterprise Vulnerability Management

Finastra; Atlanta (GA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Unlimited vacation

Hybrid working arrangements

Employee Assistance Program

Wellbeing Champions

Volunteer time off

Job summary

Finastra seeks a strategic Director of Vulnerability Management in Atlanta, GA to lead a mature, risk-based program across infrastructure, cloud, and applications. You will partner with Engineering, Product, Architecture, DevOps and Security Operations to ingrain secure practices throughout the software development lifecycle.

You will define remediation SLAs, drive executive reporting, and align with Risk, Compliance, Audit, and Legal to meet regulatory requirements.

Qualifications

• Progressive cybersecurity experience including vulnerability management and related disciplines.
• Experience leading security programs in large-scale enterprises.
• Strong knowledge of governance, risk management, and executive communications.

Responsibilities

• Own and mature enterprise vulnerability management across infrastructure, cloud, apps, and containers.
• Define risk-based prioritization using exploitability, business criticality, threat intel and asset exposure.
• Lead governance, risk and compliance collaboration with Legal, Privacy and Audit teams.

Skills

Vulnerability management

Cyber risk management

Executive communications

Leadership

Stakeholder management

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Tenable

Qualys

Rapid7

Wiz

Prisma Cloud

Microsoft Defender

GitHub Advanced Security

CodeQL

Veracode

Checkmarx

Job description

Finastra seeks a strategic Director of Vulnerability Management in Atlanta, GA to lead a mature, risk-based program across infrastructure, cloud, and applications. You will partner with Engineering, Product, Architecture, DevOps and Security Operations to ingrain secure practices throughout the software development lifecycle.

You will define remediation SLAs, drive executive reporting, and align with Risk, Compliance, Audit, and Legal to meet regulatory requirements.