Director, Vulnerability Management & Strategy

Mwiah; Northern (KY); Hybrid; USD 180,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits package

Career development & mentorship

Job summary

Cencora is seeking a Director of Vulnerability Management to lead our enterprise vulnerability program. You will shape strategy, architecture, and an end-to-end operating model across cloud, on-prem, endpoints, applications, and containers.

This hands-on leader will drive remediation decisions, governance, and performance metrics with cross-functional teams and executives. Ideal candidates possess a Bachelor's degree in a cybersecurity-related field, 8+ years in cybersecurity with 5+ years in

Qualifications

• Experience leading enterprise vulnerability or exposure management programs.
• Hands-on expertise with enterprise vulnerability management tools such as Tenable, Qualys, Rapid7 or Wiz.
• Fluency in vulnerability scoring and prioritization frameworks (CVSS, EPSS, KEV, SSVC).

Responsibilities

• Own the end-to-end vulnerability management strategy, roadmap, and operating model.
• Define risk-based remediation SLAs by asset criticality and exposure.
• Lead cross-functional collaboration with security, IT, and engineering teams to reduce unscanned assets and aging exposures.
• Drive MTTR improvements and track KPIs/ KRIs for executive reporting.
• Lead response for zero-day and critical vulnerabilities with rapid assessments and containment guidance.

Skills

Vulnerability management

Leadership

Threat intelligence

CVSS/EPSS prioritization

Cloud security

SAST/DAST/SCA

Container security

Education

Bachelor’s degree in Cybersecurity/Computer Science/Information Systems

Master’s degree in related field (preferred)

Tools

Tenable

Tableau/Qualys/Rapid7/Wiz

Job description

Cencora is seeking a Director of Vulnerability Management to lead our enterprise vulnerability program. You will shape strategy, architecture, and an end-to-end operating model across cloud, on-prem, endpoints, applications, and containers.

This hands-on leader will drive remediation decisions, governance, and performance metrics with cross-functional teams and executives. Ideal candidates possess a Bachelor's degree in a cybersecurity-related field, 8+ years in cybersecurity with 5+ years in