Vulnerability Management Manager

Consolidated Edison, Inc.; New York, Northern (NY, KY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Consolidated Edison, Inc. seeks a Systems Manager for Vulnerability Management to lead a team of about 9 and drive risk reduction across systems, cloud, applications, and OT.

The role partners with engineering, cloud teams and security leadership to define scope, prioritization, remediation, and verification of vulnerabilities. You will modernize the program toward CTEM, connect vulnerabilities to real exposure, socialize new operating models, and develop repeatable routines, escalation, and

Job description

The Systems Manager, Vulnerability Management leads the Vulnerability Management team and drives measurable risk reduction across systems, Cloud, applications and operational technology (OT) and reports to the Director, Cybersecurity Operations while partnering closely with engineering, platform, operations, application security, cloud teams, and OT stakeholders to strengthen cloud security work tied to resource misconfigurations, advance application security through shift left and runtime security and build OT security vulnerability management capability from scratch by defining scope, intake, prioritization, remediation paths and verification, while ensuring rapid and well-coordinated response to emerging critical vulnerabilities and risks such as secrets leakage.

This role will modernize the vulnerability management program towards Continuous Threat Exposure Management (CTEM), by connecting vulnerabilities to real exposure and threat context and tracking outcomes that reflect risk reduction over time. Stakeholder management is a core responsibility, including socializing new programs, desired outcomes and operating models with engineering, platform, operations and security leadership and aligning ownership and expectations so remediation becomes predictable and measurable. You will also train and develop a team of about 9 by building repeatable operating routines, improving escalation and incident coordination, and creating skills roadmap across cloud security, application security, vulnerability workflows, runtime protection, and OT fundamentals, and you will help futureproof the capability by recruiting, onboarding, and developing additional vulnerability management talent as the program grows. In addition, the Systems Manager will participate in industry working groups and forums to collaborate with peers on CTEM and vulnerability management programs and processes.