Vulnerability Management Manager

Con Edison; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Con Edison is seeking a Systems Manager for Vulnerability Management. This role involves leading the Vulnerability Management team to reduce cyber risks and modernizing the cybersecurity program towards Continuous Threat Exposure Management (CTEM).

The successful candidate will work closely with various teams, manage stakeholder expectations, and develop a team of approximately 9 members. Responsibilities include defining remediation paths and ensuring effective response to vulnerabilities. A strong background in cybersecurity and team leadership is essential for this position.

Qualifications

• Proven experience in vulnerability management and cybersecurity.
• Demonstrated ability to lead a team and manage stakeholders effectively.
• Familiarity with Cloud and operational technology security.

Responsibilities

• Lead the Vulnerability Management team to drive risk reduction.
• Modernize the vulnerability management program towards Continuous Threat Exposure Management.
• Train and develop a team to improve operating routines and incident coordination.

Skills

Cybersecurity

Vulnerability Management

Cloud Security

Team Leadership

Job description

The Systems Manager, Vulnerability Management leads the Vulnerability Management team and drives measurable risk reduction across systems, Cloud, applications and operational technology (OT) and reports to the Director, Cybersecurity Operations while partnering closely with engineering, platform, operations, application security, cloud teams, and OT stakeholders to strengthen cloud security work tied to resource misconfigurations, advance application security through shift left and runtime security and build OT security vulnerability management capability from scratch by defining scope, intake, prioritization, remediation paths and verification, while ensuring rapid and well-coordinated response to emerging critical vulnerabilities and risks such as secrets leakage.

This role will modernize the vulnerability management program towards Continuous Threat Exposure Management (CTEM), by connecting vulnerabilities to real exposure and threat context and tracking outcomes that reflect risk reduction over time. Stakeholder management is a core responsibility, including socializing new programs, desired outcomes and operating models with engineering, platform, operations and security leadership and aligning ownership and expectations so remediation becomes predictable and measurable. You will also train and develop a team of about 9 by building repeatable operating routines, improving escalation and incident coordination, and creating skills roadmap across cloud security, application security, vulnerability workflows, runtime protection, and OT fundamentals, and you will help futureproof the capability by recruiting, onboarding, and developing additional vulnerability management talent as the program grows. In addition, the Systems Manager will participate in industry working groups and forums to collaborate with peers on CTEM and vulnerability management programs and processes.