Vulnerability Management Program Lead

Considine Search; New York (NY); On-site; USD 200,000 - 215,000; Full time

Job summary

Considine Search is seeking a Vulnerability Management Manager for our New York team. You will lead enterprise vulnerability management, oversee identification, assessment, prioritization, and remediation across endpoints, servers, and cloud, and drive program strategy in alignment with risk tolerance and regulatory obligations.

You will collaborate with security and IT teams, design remediation schedules, track SLAs, and report on trends and KPIs to executives.

Qualifications

• Bachelor's degree in IT, CS, or related field or equivalent experience.
• 3–5 years in vulnerability or patch management in medium to large enterprises.
• Familiarity with CVSS/EPSS, and risk-based decision making.
• Experience with security frameworks such as NIST CSF or ISO 27001.
• Strong communication and cross-functional collaboration skills.
• Ability to obtain/maintain a secret clearance; U.S. citizenship required.

Responsibilities

• Lead assessment, prioritization, and remediation tracking across endpoints, servers, and cloud environments.
• Evaluate vulnerability criticality using risk-based frameworks and threat intel.
• Design and maintain remediation schedules and maintenance windows.
• Ensure timely patching and track deployment status with SLAs.
• Correlate scan findings with patch status to identify gaps and report trends.
• Lead emergency patching for actively exploited vulnerabilities.

Skills

Vuln mgmt

Patch mgmt

Risk assessment

Communication

Security frameworks

Certifications

Education

Bachelor's degree or equivalent experience

Tools

Tenable

Qualys

Rapid7

WSUS

SCCM

Intune

Job description

Considine Search is seeking a Vulnerability Management Manager for our New York team. You will lead enterprise vulnerability management, oversee identification, assessment, prioritization, and remediation across endpoints, servers, and cloud, and drive program strategy in alignment with risk tolerance and regulatory obligations.

You will collaborate with security and IT teams, design remediation schedules, track SLAs, and report on trends and KPIs to executives.