Enterprise Vulnerability Manager

Guild Mortgage; United States; On-site; USD 109,000 - 157,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D

LTD

401(k) with employer match

Job summary

Guild Mortgage Company in the United States is seeking a Vulnerability Manager to lead the enterprise vulnerability management program, partner with Infrastructure, Cloud, DevOps, IT Operations, and business stakeholders to reduce cyber risk, and drive remediation with risk-based prioritization.

This exempt role offers a salary range of $109,114 to $156,510 annually and includes a comprehensive benefits package.

Qualifications

• Bachelor's Degree related to the position or equivalent.
• Minimum five years experience.
• Minimum three years supervisory or leadership experience.
• Ability to organize and manage multiple priorities simultaneously.
• Ability to work well independently or within a team.
• Excellent interpersonal communication skills required.
• Must be able to handle confidential matters with discretion.
• Excellent verbal and written communication skills required.
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.

Responsibilities

• Develop, implement, and continuously improve the enterprise vulnerability management program.
• Establish and maintain existing vulnerability management policies, standards, procedures, and governance processes.
• Define risk-based remediation priorities based on asset criticality, exploitability, threat intelligence, and business impact.
• Lead vulnerability review meetings and remediation governance forums.
• Develop vulnerability management roadmaps and maturity improvement initiatives.
• Oversee vulnerability scanning activities across: Servers, Workstations, Network devices, Cloud platforms, Containers, Applications, Databases
• Validate and triage identified vulnerabilities to reduce false positives.
• Assess vulnerability severity using CVSS, threat intelligence, exploit availability, and environmental factors.
• Monitor emerging threats, zero-day vulnerabilities, and security advisories.
• Coordinate remediation efforts with IT Operations, Infrastructure, Engineering, Cloud, and Development teams.
• Establish remediation timelines and service-level objectives (SLOs).
• Track remediation progress against established metrics.
• Manage exception processes and risk acceptance workflows.
• Escalate critical vulnerabilities and overdue remediation items to leadership.
• Manage vulnerability scanning and management platforms such as: Tenable, Microsoft Defender Vulnerability Management, Wiz
• Ensure scanning coverage, tuning, maintenance, and integration effectiveness.
• Develop executive dashboards and operational reporting.
• Report vulnerability trends, remediation effectiveness, and exposure reduction progress.
• Track and report key performance indicators (KPIs) and key risk indicators (KRIs).
• Support enterprise risk management initiatives.
• Evaluate vulnerabilities within the context of business risk.
• Facilitate risk-based decision-making regarding remediation versus risk acceptance.
• Align vulnerability management activities to regulatory and security frameworks.
• Incorporate internal and external threat intelligence into vulnerability prioritization.
• Monitor CISA Known Exploited Vulnerabilities (KEV) catalog and other threat intelligence sources.
• Prioritize remediation activities based on active exploitation trends.

Skills

Interpersonal communication

Independent and team work

Organizational skills

Attention to detail

Ability to manage multiple priorities

Education

Bachelor's Degree or equivalent related to the position

Tools

Tenable

Microsoft Defender Vulnerability Management

Wiz

Job description

Guild Mortgage Company in the United States is seeking a Vulnerability Manager to lead the enterprise vulnerability management program, partner with Infrastructure, Cloud, DevOps, IT Operations, and business stakeholders to reduce cyber risk, and drive remediation with risk-based prioritization.

This exempt role offers a salary range of $109,114 to $156,510 annually and includes a comprehensive benefits package.