VP Security Manager – Threat & Vulnerability Management

State Employees' Credit Union; Raleigh (NC); Hybrid; USD 130,000 - 180,000; Full time

Job summary

A leading financial institution is seeking a Vice President, Cyber Security Manager to lead Cyber Threat Intelligence and Vulnerability Management programs. This strategic role involves managing a team, driving security initiatives, and ensuring effective remediation of security vulnerabilities. The ideal candidate will have extensive experience in cybersecurity management and strong leadership capabilities.

Qualifications

• 3-5+ years of experience in Cyber Security Management and People Management.
• Extensive knowledge of security architectures and protocols.
• Expertise in vulnerability scanning and reporting solutions.

Responsibilities

• Lead Cyber Threat Intelligence and Vulnerability Management programs.
• Build and manage a high-performing team of cyber security analysts.
• Establish a risk-based approach for effective vulnerability management.

Skills

Cyber Security Management

Team Management

Vulnerability Management

Risk-based Approach

Communication Skills

Education

Bachelor’s degree in Computer Science or Information Systems

Relevant professional certifications (CISSP, CISA, etc.)

Tools

Qualys

Tenable

Tenable Lumin

Splunk

Job description

If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!

Position Overview:

SECU is seeking a highly motivated and experienced Vice President, Cyber Security Manager to lead our Cyber Threat Intelligence (CTI), Security Testing, Vulnerability Management, and Application Security programs. As a strategic leader and self-starter, you will be responsible for the strategic planning, leadership, and tactical support of these critical security functions.

You will mature and direct a team of cyber security analysts and engineers, driving a risk-based approach to analyzing vulnerability data and the evolving threat landscape. Your primary focus will be to prioritize remediation efforts, mature our overall security posture, and lead offensive security strategies. This includes overseeing static and dynamic code analysis, penetration testing, red and purple team exercises, and ensuring the effective remediation and validation of identified security gaps.

This leadership role demands exceptional verbal and written communication skills, strong strategic collaboration abilities, a proven track record of developing both team and technical capabilities, and the ability to forge strong partnerships with cross-functional teams.

Essential Responsibilities:

• (20%) Strategically lead and direct the Cyber Threat Intelligence, Vulnerability Management, Security Testing, and Application Security programs.
• (20 %) Build, develop, and manage a high-performing team of cyber security analysts and engineers.
• (20 %) Establish and drive a risk-based approach to vulnerability management and threat intelligence for effective prioritization and remediation.
• (15%) Lead the offensive security strategy, including advanced testing methodologies, to identify and address security weaknesses.
• (15 %) Ensure the effective remediation and validation of identified security vulnerabilities and gaps.
• (10 %) Develop strong cross-functional partnerships and provide clear, risk-based reporting to stakeholders.

Required Education & Experience (Knowledge, Skills, & Abilities):

• 3-5+ years of experience in Cyber Security Management and People Management.
• 3-5+ years required of combined IT and security work experience with broad exposure to Cyber Threat Intelligence and Vulnerability Management.
• Expertise in vulnerability management, bringing assertive expert leadership and guidance to teams in patching and vulnerability remediation.
• Experience with vulnerability scanning and reporting solutions including Qualys, Tenable, Tenable Lumin, Splunk, etc.
• Experience with various Cyber Threat Intelligence service providers and capabilities.
• Extensive knowledge of computer security architectures and protocols, including firewalls, DMZs, remote access, networking, operating systems, and web applications.
• Understanding of Application Security including Application development and analysis.

Preferred Education & Experience (Knowledge, Skills, & Abilities):

• Bachelor’s degree in Computer Science, Information Systems or at least 5yrs of experience in related field.
• Knowledge of modern enterprise and security architectures, their challenges, common approaches to overcome their challenges, and their inherent security strengths and weaknesses.
• Professional certifications such as: CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications.

Job Environment & Physical Requirements:

• Remote working and remote options are available.
• Office setting with physical proximity to other employees is also intermittently required.
• Able to work all hours scheduled, including unscheduled overtime as directed by manager/supervisor and required by business need.

SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.

Disclaimer

State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.