Vulnerability Management Manager

Con Edison Co.; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Con Edison Co. is seeking a Systems Manager, Vulnerability Management to lead the Vulnerability Management team and drive measurable risk reduction across systems, Cloud, applications and OT.

The role partners with engineering, platform, operations, application security and OT stakeholders to strengthen cloud security, advance application security through shift left, and build OT vulnerability management from scratch, defining scope and remediation paths while ensuring rapid response to emerging

Qualifications

• Experience leading vulnerability management programs.
• Strong knowledge of CTEM and risk-based remediation.
• Proven ability to manage cross-functional security initiatives.

Responsibilities

• Lead Vulnerability Management team and drive risk reduction.
• Modernize program towards Continuous Threat Exposure Management (CTEM).
• Manage stakeholder relationships across engineering, operations, cloud and OT teams.
• Define scope, intake, prioritization, remediation paths and verification.
• Recruit, onboard and develop a team of security professionals.

Skills

Vulnerability management

CTEM

Leadership

Stakeholder management

Cloud security

Application security

OT security

Incident coordination

Team building

Recruiting

Job description

The Systems Manager, Vulnerability Management leads the Vulnerability Management team and drives measurable risk reduction across systems, Cloud, applications and operational technology (OT) and reports to the Director, Cybersecurity Operations while partnering closely with engineering, platform, operations, application security, cloud teams, and OT stakeholders to strengthen cloud security work tied to resource misconfigurations, advance application security through shift left and runtime security and build OT security vulnerability management capability from scratch by defining scope, intake, prioritization, remediation paths and verification, while ensuring rapid and well-coordinated response to emerging critical vulnerabilities and risks such as secrets leakage.

This role will modernize the vulnerability management program towards Continuous Threat Exposure Management (CTEM), by connecting vulnerabilities to real exposure and threat context and tracking outcomes that reflect risk reduction over time. Stakeholder management is a core responsibility, including socializing new programs, desired outcomes and operating models with engineering, platform, operations and security leadership and aligning ownership and expectations so remediation becomes predictable and measurable. You will also train and develop a team of about 9 by building repeatable operating routines, improving escalation and incident coordination, and creating skills roadmap across cloud security, application security, vulnerability workflows, runtime protection, and OT fundamentals, and you will help futureproof the capability by recruiting, onboarding, and developing additional vulnerability management talent as the program grows. In addition, the Systems Manager will participate in industry working groups and forums to collaborate with peers on CTEM and vulnerability management programs and processes.