Global Vulnerability Management Lead

QUEST DIAGNOSTICS INC; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Quest Diagnostics seeks an IT Security Technical Lead – Vulnerability Management to oversee the enterprise-wide vulnerability management program. You will lead policy, scanning, remediation tracking, and risk-based decision making across systems, applications, and cloud environments.

The role requires deep technical expertise, strategic oversight, and leadership to reduce organizational risk while aligning with HIPAA, PCI, and SOX requirements.

Qualifications

• Bachelor's degree in computer science, information security, or related discipline.
• 7+ years in IT security with 3+ years leading vulnerability or threat management.
• Experience with Qualys, Tenable, Wiz or equivalent vulnerability management tools.
• Hands-on network penetration testing experience for PCI environments.
• Strong understanding of CVSS, CVE, and CWE.
• Familiarity with remediation across Windows, Linux, networking, and cloud environments.
• Excellent communication and stakeholder management skills.
• Certifications such as CISSP, CISM, CISA, GPEN, or Qualys VMDR specialist.
• Experience in regulated industries (healthcare, financial or life sciences).
• Familiarity with ServiceNow, Archer, or similar GRC platforms for exception and risk tracking.
• Experience mentoring security engineers, specialists, or analysts.

Responsibilities

• Lead the global Vulnerability Management program, including policy management, scanning, reporting, and remediation tracking.
• Design and maintain a Vulnerability Management framework aligned with NIST, HIPAA, PCI, SOX, and related standards.
• Lead rapid assessment and remediation for zero-day vulnerabilities with impact analysis and prioritization.
• Serve as SME for Qualys or similar scanning platforms, ensuring accurate detection and reporting.
• Coordinate across Infrastructure, Application, and Risk teams to drive remediation activities.
• Define and monitor metrics and KPIs, and report progress to senior leadership.
• Develop dashboards and reports showing trends, SLA performance, and residual risk.
• Conduct ad-hoc vulnerability assessments with risk-based remediation recommendations.
• Provide guidance on vulnerability risk, security exceptions, and compensating controls.
• Support regulatory compliance by timely remediation tied to audit findings (HIPAA, PCI, SOX).
• Develop and deliver training, workshops, and awareness sessions.
• Continuously evaluate and implement processes and automation improvements.
• Conduct network penetration testing for PCI environments using CoreImpact or similar tools to validate controls.

Skills

Vulnerability management

Threat management

Stakeholder management

Security leadership

Communication skills

Education

Bachelor's degree in computer science / information security

Tools

Qualys

Tenable

Wiz

CoreImpact

Job description

Quest Diagnostics seeks an IT Security Technical Lead – Vulnerability Management to oversee the enterprise-wide vulnerability management program. You will lead policy, scanning, remediation tracking, and risk-based decision making across systems, applications, and cloud environments.

The role requires deep technical expertise, strategic oversight, and leadership to reduce organizational risk while aligning with HIPAA, PCI, and SOX requirements.