Hybrid Vulnerability Patch Lead - Enterprise Risk

New York Life; New York (NY); Hybrid; USD 112,000 - 159,000; Full time

Job summary

New York Life seeks a senior leader to own the enterprise vulnerability remediation operating model across on‑prem, cloud, endpoints, and application‑dependent environments, coordinating IT Ops, Security, Risk, and vendors.

You will drive governance, triage, SLA management, executive dashboards, and evidence‑based closure with a hybrid work model and quarterly stakeholder collaboration.

Qualifications

• 10+ years in IT Operations, Infrastructure, Security Engineering, SRE, or Vulnerability Management.
• Experience leading cross-functional remediation programs.
• Strong understanding of vulnerability scanning, patching, change, and remediation governance.
• Experience with executive reporting and SLA management.

Responsibilities

• Own the enterprise patch and vulnerability remediation operating model across on‑prem, cloud, endpoint, and application‑dependent environments.
• Define intake, triage, severity lanes, remediation SLAs, escalation paths, and evidence standards.
• Chair remediation governance forums; drive accountability and surface blockers for executive action.
• Design centralized workflow connecting scanning, asset ownership, patch execution, change coordination, validation, and reporting.

Skills

IT Operations

Security Engineering

SRE

Vulnerability Management

Cross-functional leadership

Executive reporting

Tools

Qualys

Tanium

ServiceNow/Jira

CMDB

Dashboarding

Job description

New York Life seeks a senior leader to own the enterprise vulnerability remediation operating model across on‑prem, cloud, endpoints, and application‑dependent environments, coordinating IT Ops, Security, Risk, and vendors.

You will drive governance, triage, SLA management, executive dashboards, and evidence‑based closure with a hybrid work model and quarterly stakeholder collaboration.