Senior Vulnerability & Attack Surface Leader (Hybrid)

McLane Company, Inc.; Austin (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

McLane Company, Inc. is seeking a Senior Manager of Vulnerability Management to lead enterprise programs spanning on-premises, cloud, applications, and internet-facing environments.

This role requires strategic direction, execution, and continuous improvement of vulnerability, attack surface, and CTEM initiatives, with collaboration across Cyber Operations, Infrastructure, Cloud, App Development, and GRC teams.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field is required.
• 10+ years of IT experience with 8+ years in cybersecurity.
• Experience leading enterprise-scale vulnerability or exposure management programs.
• Strong knowledge of Vulnerability Management, EASM, CSPM, CTEM, and cyber risk management.
• Experience presenting cybersecurity metrics and recommendations to senior leadership.
• Proven people leadership and stakeholder management skills.

Responsibilities

• Lead enterprise vulnerability and exposure management programs.
• Drive attack surface discovery and remediation efforts.
• Build and mature CTEM capabilities and processes.
• Partner with Cyber Operations, Infrastructure, Cloud, Application Development, and GRC teams.
• Develop executive-level reporting, metrics, and risk dashboards.
• Establish governance, remediation standards, and accountability programs.
• Coach and develop a team of cybersecurity professionals.
• Drive automation, process improvement, and risk reduction initiatives.

Skills

Leadership

Stakeholder management

Cybersecurity expertise

Communication

Executive reporting

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Vulnerability Management tools

EASM tools

CTEM tools

CSPM tools

Job description

McLane Company, Inc. is seeking a Senior Manager of Vulnerability Management to lead enterprise programs spanning on-premises, cloud, applications, and internet-facing environments.

This role requires strategic direction, execution, and continuous improvement of vulnerability, attack surface, and CTEM initiatives, with collaboration across Cyber Operations, Infrastructure, Cloud, App Development, and GRC teams.