Vulnerability Manager

Guild Mortgage Company; Northern (KY); Hybrid; USD 109,000 - 157,000; Full time

Job summary

Guild Mortgage Company is seeking a Vulnerability Manager to lead the enterprise vulnerability management program and drive remediation across the technology environment. This role partners with Infrastructure, Cloud, Development, DevOps, and IT Operations to reduce cyber risk while aligning with business objectives.

The role reports to leadership and develops risk-based prioritization methodologies, manages scanning tools, and delivers executive-level reporting on security posture.

Qualifications

• Bachelor's Degree or equivalent in a related field.
• Minimum five years of experience.
• Minimum three years in a supervisory/leadership role.
• Ability to manage multiple priorities simultaneously.
• Strong interpersonal and written/verbal communication skills.
• Ability to handle confidential matters with discretion.

Responsibilities

• Develop, implement, and improve the enterprise vulnerability management program.
• Define risk-based remediation priorities based on asset criticality and threat intel.
• Lead vulnerability review meetings and governance forums.
• Oversee scanning across servers, workstations, networks, cloud, containers, and apps.
• Coordinate remediation with IT operations and development teams.
• Develop executive dashboards and KPIs to track remediation progress.

Skills

Interpersonal communication

Leadership

Organizational skills

Multitasking

Team collaboration

Education

Bachelor's degree (related field)

Tools

Tenable

Microsoft Defender Vulnerability Management

Wiz

Job description

Guild Mortgage Company, closing loans and opening doors since 1960. As a mortgage banking firm we are dedicated to serving the homeowner/buyer. Our goal is to provide affordable home financing for our customers, utilizing the best terms available while providing a level of professionalism and service unsurpassed in the lending industry.

Position Summary

The Vulnerability Manager is responsible for leading the enterprise vulnerability management program, ensuring the timely identification, assessment, prioritization, remediation, and reporting of security vulnerabilities across the organization's technology environment. This role partners closely with Infrastructure, Cloud, Application Development, DevOps, IT Operations, and business stakeholders to reduce cyber risk while supporting organizational objectives.

The Vulnerability Manager develops and maintains vulnerability management processes, drives remediation efforts, establishes risk-based prioritization methodologies, manages security scanning technologies, and delivers executive-level reporting on the organization's security posture.

Compensation

This role is an exempt position with a targeted salary range of $109,114 to $156,510 annually.

Compensation at Guild is influenced by a wide array of factors including but not limited to local and federal minimum wage requirements, education, level of experience, and applicant’s geographical location.

Essential Functions

• Develop, implement, and continuously improve the enterprise vulnerability management program.
• Establish and maintain existing vulnerability management policies, standards, procedures, and governance processes.
• Define risk-based remediation priorities based on asset criticality, exploitability, threat intelligence, and business impact.
• Lead vulnerability review meetings and remediation governance forums.
• Develop vulnerability management roadmaps and maturity improvement initiatives.
• Oversee vulnerability scanning activities across: Servers, Workstations, Network devices, Cloud platforms, Containers, Applications, Databases
• Validate and triage identified vulnerabilities to reduce false positives.
• Assess vulnerability severity using CVSS, threat intelligence, exploit availability, and environmental factors.
• Monitor emerging threats, zero-day vulnerabilities, and security advisories.
• Coordinate remediation efforts with IT Operations, Infrastructure, Engineering, Cloud, and Development teams.
• Establish remediation timelines and service-level objectives (SLOs).
• Track remediation progress against established metrics.
• Manage exception processes and risk acceptance workflows.
• Escalate critical vulnerabilities and overdue remediation items to leadership.
• Manage vulnerability scanning and management platforms such as: Tenable, Microsoft Defender Vulnerability Management, Wiz
• Ensure scanning coverage, tuning, maintenance, and integration effectiveness.
• Develop executive dashboards and operational reporting.
• Report vulnerability trends, remediation effectiveness, and exposure reduction progress.
• Track and report key performance indicators (KPIs) and key risk indicators (KRIs).
• Evaluate vulnerabilities within the context of business risk.
• Facilitate risk-based decision-making regarding remediation versus risk acceptance.
• Align vulnerability management activities to regulatory and security frameworks.
• Incorporate internal and external threat intelligence into vulnerability prioritization.
• Monitor CISA Known Exploited Vulnerabilities (KEV) catalog and other threat intelligence sources.
• Prioritize remediation activities based on active exploitation trends.

Qualifications

• Bachelor's Degree directly related to the position or equivalent, preferred.
• Minimum five years experience.
• Minimum three years supervisory or leadership experience.
• Ability to organize and manage multiple priorities simultaneously.
• Ability to work well independently or within a team.
• Excellent interpersonal communication skills required.
• Must be able to handle confidential matters with discretion.
• Excellent verbal and written communication skills required.
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.
• Commitment to company values.
• Customer Service - Proactive attention to each person.
• Integrity - Do and say what's right.
• Respect - Treat others with dignity.
• Collaboration - Listen and work together.
• Learning - Seek knowledge and strive for improvement.
• Excellence - Deliver the unexpected.

Supervision

Job Scope: Plays a key role in area by generating insights and ideas on policies, processes, procedures, and efficiency; contributes ideas to strategic and operational plans to ensure alignment.

Complexity: Problems encountered often cross areas of the organization and are often complex, broad in scope, and unprecedented with no clear solution; often works cross-functionally to solve problems and implemented changes.

Impact: Decisions and actions have a direct impact on the outcomes of the department, projects, and programs.

Interaction/Supervision: Acts as a mentor/guide to less experienced professional contributor staff in a similar role; works independently and only under general direction; guided by professional standards, desired outcomes, and project plan specifications.

Requirements

• Work is primarily sedentary; mobility in an office setting.
• Ability to operate standard office equipment and keyboards.
• Ability to accurately interpret sounds and associated meanings at a volume consistent with interpersonal conversation.
• Must be able to adhere to process protocol. Must be able to apply established protocols in a timely manner.
• Work is primarily performed during the business week, Monday - Friday.

Guild offers a pleasant work environment, competitive compensation and excellent benefits package; including medical, dental, vision, life insurance, AD&D, LTD and 401(k) with employer match.

Guild Mortgage Company is an Equal Opportunity Employer.

REQ#: VULNE018364

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.