Enterprise Vulnerability Program Lead

Guild Mortgage Company; Northern (KY); Hybrid; USD 109,000 - 157,000; Full time

Job summary

Guild Mortgage Company is seeking a Vulnerability Manager to lead the enterprise vulnerability management program and drive remediation across the technology environment. This role partners with Infrastructure, Cloud, Development, DevOps, and IT Operations to reduce cyber risk while aligning with business objectives.

The role reports to leadership and develops risk-based prioritization methodologies, manages scanning tools, and delivers executive-level reporting on security posture.

Qualifications

• Bachelor's Degree or equivalent in a related field.
• Minimum five years of experience.
• Minimum three years in a supervisory/leadership role.
• Ability to manage multiple priorities simultaneously.
• Strong interpersonal and written/verbal communication skills.
• Ability to handle confidential matters with discretion.

Responsibilities

• Develop, implement, and improve the enterprise vulnerability management program.
• Define risk-based remediation priorities based on asset criticality and threat intel.
• Lead vulnerability review meetings and governance forums.
• Oversee scanning across servers, workstations, networks, cloud, containers, and apps.
• Coordinate remediation with IT operations and development teams.
• Develop executive dashboards and KPIs to track remediation progress.

Skills

Interpersonal communication

Leadership

Organizational skills

Multitasking

Team collaboration

Education

Bachelor's degree (related field)

Tools

Tenable

Microsoft Defender Vulnerability Management

Wiz

Job description

Guild Mortgage Company is seeking a Vulnerability Manager to lead the enterprise vulnerability management program and drive remediation across the technology environment. This role partners with Infrastructure, Cloud, Development, DevOps, and IT Operations to reduce cyber risk while aligning with business objectives.

The role reports to leadership and develops risk-based prioritization methodologies, manages scanning tools, and delivers executive-level reporting on security posture.