Head of Vulnerability Management & Security Orchestration

AmerisourceBergen Services Corporation; Carrollton (TX); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Professional development

Mentorship programs

Training resources

Job summary

Cencora is seeking a Director of Vulnerability Management to lead the end-to-end program across cloud, on‑prem, endpoints, applications, containers, and third‑party hosted environments. You will shape strategy, architecture, and operating model while guiding remediation decisions with engineering teams and leadership.

You will mature the program toward continuous, risk‑based exposure management, establish governance, and drive measurable reductions in mean time to remediate.

Qualifications

• Bachelor’s degree or equivalent in a relevant field and 8+ years in cybersecurity with 5+ years in vulnerability management.
• Experience leading technical teams and maturing vulnerability/exposure programs at enterprise scale.
• Hands-on expertise with enterprise vulnerability management tools and cloud security.
• Strong knowledge of CVSS, EPSS, and threat intelligence integration.

Responsibilities

• Own the vulnerability management program strategy, roadmap, and governance.
• Define risk-based remediation SLAs by asset criticality and exposure.
• Lead cross‑functional teams to reduce exposure and aging vulnerabilities.
• Communicate risks and remediation status to executives and stakeholders.

Skills

Cybersecurity leadership

Vulnerability management

Threat intelligence

Cloud security

Security frameworks

Communication with executives

Education

Bachelor’s degree in Cybersecurity/Computer Science/Information Systems

Master’s degree in cybersecurity/IT/IS or related field

Tools

Tenable

Qualys

Rapid7

Wiz

Job description

Cencora is seeking a Director of Vulnerability Management to lead the end-to-end program across cloud, on‑prem, endpoints, applications, containers, and third‑party hosted environments. You will shape strategy, architecture, and operating model while guiding remediation decisions with engineering teams and leadership.

You will mature the program toward continuous, risk‑based exposure management, establish governance, and drive measurable reductions in mean time to remediate.