Head of Vulnerability Management & Security Posture

Eli Lilly and Company; United States; Remote; USD 159,000 - 257,000; Full time

Job summary

Lilly is seeking a Senior Director to own enterprise vulnerability management, driving end-to-end coverage from scanning to remediation. You will lead multiple teams, set priorities and SLAs, and partner with security operations, risk, and audit to reduce the attack surface.

The role requires hands-on VM experience, enterprise leadership, and collaboration across Security Architecture & Engineering, Operations, and Risk & Compliance to mature the vulnerability program.

Qualifications

• Hands-on vulnerability management experience across hybrid cloud and on-prem environments.
• Experience leading security/VM organizations at enterprise scale.
• Background in security operations, vulnerability management, offensive security, or security engineering.

Responsibilities

• Set the technical strategy, architecture, and operating model for end-to-end vulnerability management.
• Lead and develop the leaders and teams in the function.
• Set prioritization standards and remediation SLAs.
• Drive accountability with technology owners.
• Report posture and remediation progress to senior leadership.
• Oversee the application security program as part of end-to-end vulnerability management.
• Own exposure reporting and burndown: executive reporting and data pipelines.

Skills

Vulnerability management

Security operations

Attack surface management

Remediation operations

Leadership

Prioritization

Education

Bachelor’s Degree (Cyber Security, CS, IT)

Job description

Lilly is seeking a Senior Director to own enterprise vulnerability management, driving end-to-end coverage from scanning to remediation. You will lead multiple teams, set priorities and SLAs, and partner with security operations, risk, and audit to reduce the attack surface.

The role requires hands-on VM experience, enterprise leadership, and collaboration across Security Architecture & Engineering, Operations, and Risk & Compliance to mature the vulnerability program.