Global Lead, Vulnerability Response Management - Director

Deutsche Bank; Jacksonville (TX); Hybrid; USD 143,000 - 222,000; Full time

Benefits offered by this job

Hybrid work model

Generous vacation and personal days

Wellbeing benefits

Job summary

Deutsche Bank is seeking a Global Lead, Vulnerability Response Management in Jacksonville, FL. The role oversees enterprise vulnerability strategy and remediation, reporting to senior leadership and regulators.

You will define the global program, align with cyber risk objectives, and drive improvement across regions with a focus on risk-based prioritization. The position emphasizes collaboration with CIO levels, security leadership, and regulatory teams, while leveraging AI tools to enhance

Qualifications

• Senior leadership experience in vulnerability management or cyber defense.
• Experience guiding enterprise-wide vulnerability remediation programs.
• Ability to engage with regulators, auditors, and executives on cyber risk.

Responsibilities

• Define and implement global vulnerability response strategy and operating model.
• Establish enterprise-wide governance frameworks and procedures.
• Oversee risk-based prioritization, remediation, and SLA adherence.
• Lead continuous improvement of vulnerability capabilities across regions.
• Ensure regulatory and audit obligations are met with effective oversight.

Skills

Leadership

Vulnerability Management

Cyber Defense

Executive communications

AI tools utilization

Education

CISSP/CISM/CRISC certification

Tools

NIST SP 800-40

DORA

ISO 27001

NIST CSF

Job description

Job Description:

J ob Title Global Lead, Vulnerability Response Management

Corporate Title Director

Location Jacksonville, FL

Overview

The Global Lead, Vulnerability Response Management is responsible for defining and leading the enterprise-wide strategy, governance, and execution of the organization's vulnerability response and remediation program.

The role provides global oversight of vulnerability risk, remediation performance, regulatory compliance, and cyber exposure reduction across all regions, business divisions, and technology domains. You are accountable for ensuring vulnerabilities are prioritized using risk-based methodologies and remediated within agreed service levels, while driving continual improvement in cyber resilience.

The Global Lead serves as the senior authority for vulnerability response management and acts as the primary advisor to leadership, risk committees, regulators, and auditors on vulnerability-related cyber risk.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift and volunteer programs

What You'll Do

• Define, enhance, and implement the global Vulnerability Response Management strategy and operating model
• Establish enterprise-wide standards, policies, governance frameworks, and operating procedures
• Develop and oversee a risk-based approach to vulnerability prioritization, remediation, and SLA adherence
• Lead continuous improvement of vulnerability management capabilities and ensure consistent execution across all regions
• Accountable for the global vulnerability response team, operating processes, key procedures, and performance objectives
• Oversee regulatory, audit, and compliance obligations, while monitoring regional performance and remediation effectiveness

How You'll Lead

• Partner with Technology Leadership (Chief Information Officer and Technology Heads) to embed vulnerability response priorities into technology roadmaps, drive accountability for remediation outcomes, and ensure alignment with enterprise cyber risk objectives
• Collaborate with the Chief Information Security Officers and Security Leadership teams to define vulnerability management strategy, establish risk-based prioritization frameworks, and provide transparent reporting on cyber exposure, remediation performance, and emerging threats
• Engage with Technology Risk, Audit, Regulatory, and Control functions to ensure compliance with regulatory requirements, support audits and examinations, and strengthen governance through effective oversight, metrics, and continuous improvement initiatives

Skills You'll Need

• Significant leadership experience in Vulnerability Management, Cyber Defense, Security Operations, or Cyber Risk within large global organizations
• Proven experience leading enterprise-wide cyber security response and vulnerability remediation programs across geographically dispersed teams
• Demonstrated success by reducing cyber risk through risk-based vulnerability prioritization, remediation governance, and measurable risk reduction initiatives
• Experience engaging with executive leadership, regulators, auditors, and risk committees on cyber security and vulnerability management matters
• In-depth knowledge of relevant regulatory and industry frameworks, including NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001, and the NIST Cybersecurity Framework
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

Skills That Will Help You Excel

• Strong executive communication and stakeholder management skills, with the ability to influence senior leaders and drive complex decisions across global organizations
• Strategic thinker with the ability to balance cyber risk reduction, business priorities, and operational delivery
• Demonstrated ability to lead large-scale transformation and continuous improvement initiatives within cybersecurity or technology functions
• Industry certifications such as CISSP, CISM, CRISC, GIAC, or equivalent cybersecurity credentials

Expectations

It is the Bank's expectation that employees hired into this role will work in the Jacksonville office in accordance with the Bank's hybrid working model.

Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.

The salary range for this position in Jacksonville is $143,000 to $222,000. Actual salaries may be based on a number of factors includi