Vulnerability Management VP: Risk Strategy & Remediation

Barclays; Hanover Township (NJ); On-site; USD 175,000 - 225,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401(k) plan

Life insurance

Paid leave

Job summary

Barclays in Whippany, New Jersey is seeking a Vulnerability Management SME – VP to strengthen the cybersecurity posture by identifying, evaluating, and remediating vulnerabilities across the enterprise. You will partner with Technology, Engineering and Cybersecurity to drive risk reduction within a threat-informed defense strategy.

The role may be leadership or individual contributor, with responsibilities including risk-based prioritisation, policy development, and stakeholder engagement.

Qualifications

• Proficiency with vulnerability scanning tools (Nessus, Qualys, Rapid7, OpenVAS).
• Understanding of patch deployment strategies across OSes and apps.
• Knowledge of network architecture, firewalls, IDS/IPS, and secure protocols.
• Experience with Windows, Linux, macOS security features and vulnerabilities.
• Experience with manual and automated penetration testing to validate findings.
• Ability to interpret threat feeds, CVEs, and trends for vulnerability management.
• Familiarity with standards like NIST, ISO 27001, CIS Controls.

Responsibilities

• Allocate risk ratings and remediation prioritisation for vulnerabilities.
• Develop vulnerability management operating model, policies, and procedures.
• Communicate findings to senior stakeholders and partners with dashboards and reports.
• Collaborate with Threat Intelligence and Cyber Operations teams to assess exposure.
• Define automation tool requirements for vulnerability management processes.
• Report remediation status against Key Risk Indicators.

Skills

Vulnerability management

Risk assessment

Threat intelligence

Stakeholder communication

Cybersecurity strategy

Tools

Nessus

Qualys

Rapid7

OpenVAS

Job description

Barclays in Whippany, New Jersey is seeking a Vulnerability Management SME – VP to strengthen the cybersecurity posture by identifying, evaluating, and remediating vulnerabilities across the enterprise. You will partner with Technology, Engineering and Cybersecurity to drive risk reduction within a threat-informed defense strategy.

The role may be leadership or individual contributor, with responsibilities including risk-based prioritisation, policy development, and stakeholder engagement.