Global Lead, Vulnerability Response Management - Director

Deutsche Bank; Jacksonville (FL); Hybrid; USD 143,000 - 222,000; Full time

Benefits offered by this job

Hybrid work model

Diversity & inclusion

Health & retirement benefits

Education resources

Job summary

Deutsche Bank in Jacksonville, FL seeks a Global Lead for Vulnerability Response Management to define and drive the enterprise vulnerability program, ensuring risk-based prioritization and remediation across regions and tech domains. You will partner with CIO, CISOs, and audit teams to align with regulatory requirements, supervise the global team, monitor SLAs, and report on cyber exposure.

Hybrid work and generous benefits are offered.

Qualifications

• Significant leadership experience in Vulnerability Management, Cyber Defense, or Cyber Risk within large global organizations.
• Experience leading enterprise-wide cyber security response and remediation programs across dispersed teams.
• Experience engaging with executives, regulators, auditors, and risk committees on cyber risk matters.

Responsibilities

• Define, enhance, and implement the global Vulnerability Response Management strategy and operating model.
• Establish enterprise-wide standards, policies, governance frameworks, and operating procedures.
• Develop a risk-based prioritization and remediation approach with SLA adherence.
• Lead continuous improvement of vulnerability management capabilities across regions.
• Oversee regulatory, audit, and compliance obligations with remediation effectiveness.
• Partner with CIO/Technology to embed priorities into roadmaps and drive remediation accountability.

Skills

Vulnerability Management

Cyber Risk Leadership

Stakeholder Engagement

Job description

Position Overview

Global Lead, Vulnerability Response Management

Corporate Title: Director

Location: Jacksonville, FL

The Global Lead, Vulnerability Response Management is responsible for defining and leading the enterprise-wide strategy, governance, and execution of the organization’s vulnerability response and remediation program. The role provides global oversight of vulnerability risk, remediation performance, regulatory compliance, and cyber exposure reduction across all regions, business divisions, and technology domains. You are accountable for ensuring vulnerabilities are prioritized using risk-based methodologies and remediated within agreed service levels, while driving continual improvement in cyber resilience. The Global Lead serves as the senior authority for vulnerability response management and acts as the primary advisor to leadership, risk committees, regulators, and auditors on vulnerability-related cyber risk.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift and volunteer programs

What You’ll Do

• Define, enhance, and implement the global Vulnerability Response Management strategy and operating model
• Establish enterprise-wide standards, policies, governance frameworks, and operating procedures
• Develop and oversee a risk-based approach to vulnerability prioritization, remediation, and SLA adherence
• Lead continuous improvement of vulnerability management capabilities and ensure consistent execution across all regions
• Accountable for the global vulnerability response team, operating processes, key procedures, and performance objectives
• Oversee regulatory, audit, and compliance obligations, while monitoring regional performance and remediation effectiveness

How You’ll Lead

• Partner with Technology Leadership (Chief Information Officer and Technology Heads) to embed vulnerability response priorities into technology roadmaps, drive accountability for remediation outcomes, and ensure alignment with enterprise cyber risk objectives
• Collaborate with the Chief Information Security Officers and Security Leadership teams to define vulnerability management strategy, establish risk-based prioritization frameworks, and provide transparent reporting on cyber exposure, remediation performance, and emerging threats
• Engage with Technology Risk, Audit, Regulatory, and Control functions to ensure compliance with regulatory requirements, support audits and examinations, and strengthen governance through effective oversight, metrics, and continuous improvement initiatives

Skills You’ll Need

• Significant leadership experience in Vulnerability Management, Cyber Defense, Security Operations, or Cyber Risk within large global organizations
• Proven experience leading enterprise-wide cyber security response and vulnerability remediation programs across geographically dispersed teams
• Demonstrated success by reducing cyber risk through risk-based vulnerability prioritization, remediation governance, and measurable risk reduction initiatives
• Experience engaging with executive leadership, regulators, auditors, and risk committees on cyber security and vulnerability management matters
• In-depth knowledge of relevant regulatory and industry frameworks, including NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001, and the NIST Cybersecurity Framework
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

Skills That Will Help You Excel

• Strong executive communication and stakeholder management skills, with the ability to influence senior leaders and drive complex decisions across global organizations
• Strategic thinker with the ability to balance cyber risk reduction, business priorities, and operational delivery
• Demonstrated ability to lead large-scale transformation and continuous improvement initiatives within cybersecurity or technology functions
• Industry certifications such as CISSP, CISM, CRISC, GIAC, or equivalent cybersecurity credentials

Expectations

It is the Bank’s expectation that employees hired into this role will work in the Jacksonville office in accordance with the Bank’s hybrid working model.

Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.

The salary range for this position in Jacksonville is $143,000 to $222,000. Actual salaries may be based on a number of factors including, but not limited to, a candidate’s skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration.

Deutsche Bank Benefits

At Deutsche Bank, we recognize that our benefit programs have a profound impact on our colleagues. That’s why we are focused on providing benefits and perks that enable our colleagues to live authentically and be their whole selves, at every stage of life. We provide access to physical, emotional, and financial wellness benefits that allow our colleagues to stay financially secure and strike balance between work and home.

Click here to learn more!

Learn more about your life at Deutsche Bank through the eyes of our current employees: https://careers.db.com/life

The California Consumer Privacy Act outlines how companies can use personal information. If you are interested in receiving a copy of Deutsche Bank’s California Privacy Notice please email [e-mail] .

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law. Click these links to view "Deutsche Bank’s Equal Opportunity Policy Statement" and the following notices: "EEOC Know Your Rights" ; "Employee Rights and Responsibilities under the Family and Medical Leave Act" ; and "Employee Polygraph Protection Act" .