Vulnerability Manager

Guild Mortgage; United States; On-site; USD 109,000 - 157,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D

LTD

401(k) with employer match

Job summary

Guild Mortgage Company in the United States is seeking a Vulnerability Manager to lead the enterprise vulnerability management program, partner with Infrastructure, Cloud, DevOps, IT Operations, and business stakeholders to reduce cyber risk, and drive remediation with risk-based prioritization.

This exempt role offers a salary range of $109,114 to $156,510 annually and includes a comprehensive benefits package.

Qualifications

• Bachelor's Degree related to the position or equivalent.
• Minimum five years experience.
• Minimum three years supervisory or leadership experience.
• Ability to organize and manage multiple priorities simultaneously.
• Ability to work well independently or within a team.
• Excellent interpersonal communication skills required.
• Must be able to handle confidential matters with discretion.
• Excellent verbal and written communication skills required.
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.

Responsibilities

• Develop, implement, and continuously improve the enterprise vulnerability management program.
• Establish and maintain existing vulnerability management policies, standards, procedures, and governance processes.
• Define risk-based remediation priorities based on asset criticality, exploitability, threat intelligence, and business impact.
• Lead vulnerability review meetings and remediation governance forums.
• Develop vulnerability management roadmaps and maturity improvement initiatives.
• Oversee vulnerability scanning activities across: Servers, Workstations, Network devices, Cloud platforms, Containers, Applications, Databases
• Validate and triage identified vulnerabilities to reduce false positives.
• Assess vulnerability severity using CVSS, threat intelligence, exploit availability, and environmental factors.
• Monitor emerging threats, zero-day vulnerabilities, and security advisories.
• Coordinate remediation efforts with IT Operations, Infrastructure, Engineering, Cloud, and Development teams.
• Establish remediation timelines and service-level objectives (SLOs).
• Track remediation progress against established metrics.
• Manage exception processes and risk acceptance workflows.
• Escalate critical vulnerabilities and overdue remediation items to leadership.
• Manage vulnerability scanning and management platforms such as: Tenable, Microsoft Defender Vulnerability Management, Wiz
• Ensure scanning coverage, tuning, maintenance, and integration effectiveness.
• Develop executive dashboards and operational reporting.
• Report vulnerability trends, remediation effectiveness, and exposure reduction progress.
• Track and report key performance indicators (KPIs) and key risk indicators (KRIs).
• Support enterprise risk management initiatives.
• Evaluate vulnerabilities within the context of business risk.
• Facilitate risk-based decision-making regarding remediation versus risk acceptance.
• Align vulnerability management activities to regulatory and security frameworks.
• Incorporate internal and external threat intelligence into vulnerability prioritization.
• Monitor CISA Known Exploited Vulnerabilities (KEV) catalog and other threat intelligence sources.
• Prioritize remediation activities based on active exploitation trends.

Skills

Interpersonal communication

Independent and team work

Organizational skills

Attention to detail

Ability to manage multiple priorities

Education

Bachelor's Degree or equivalent related to the position

Tools

Tenable

Microsoft Defender Vulnerability Management

Wiz

Job description

Guild Mortgage Company, closing loans and opening doors since 1960. As a mortgage banking firm we are dedicated to serving the homeowner/buyer. Our goal is to provide affordable home financing for our customers, utilizing the best terms available while providing a level of professionalism and service unsurpassed in the lending industry.

Position Summary

The Vulnerability Manager is responsible for leading the enterprise vulnerability management program, ensuring the timely identification, assessment, prioritization, remediation, and reporting of security vulnerabilities across the organization's technology environment. This role partners closely with Infrastructure, Cloud, Application Development, DevOps, IT Operations, and business stakeholders to reduce cyber risk while supporting organizational objectives.

The Vulnerability Manager develops and maintains vulnerability management processes, drives remediation efforts, establishes risk-based prioritization methodologies, manages security scanning technologies, and delivers executive-level reporting on the organization's security posture.

Compensation

This role is an exempt position with a targeted salary range of $109,114 to $156,510 annually.

Compensation at Guild is influenced by a wide array of factors including but not limited to local and federal minimum wage requirements, education, level of experience, and applicant’s geographical location.

Essential Functions

• Develop, implement, and continuously improve the enterprise vulnerability management program.
• Establish and maintain existing vulnerability management policies, standards, procedures, and governance processes.
• Define risk-based remediation priorities based on asset criticality, exploitability, threat intelligence, and business impact.
• Lead vulnerability review meetings and remediation governance forums.
• Develop vulnerability management roadmaps and maturity improvement initiatives.
• Oversee vulnerability scanning activities across: Servers, Workstations, Network devices, Cloud platforms, Containers, Applications, Databases
• Validate and triage identified vulnerabilities to reduce false positives.
• Assess vulnerability severity using CVSS, threat intelligence, exploit availability, and environmental factors.
• Monitor emerging threats, zero-day vulnerabilities, and security advisories.
• Coordinate remediation efforts with IT Operations, Infrastructure, Engineering, Cloud, and Development teams.
• Establish remediation timelines and service-level objectives (SLOs).
• Track remediation progress against established metrics.
• Manage exception processes and risk acceptance workflows.
• Escalate critical vulnerabilities and overdue remediation items to leadership.
• Manage vulnerability scanning and management platforms such as: Tenable, Microsoft Defender Vulnerability Management, Wiz
• Ensure scanning coverage, tuning, maintenance, and integration effectiveness.
• Develop executive dashboards and operational reporting.
• Report vulnerability trends, remediation effectiveness, and exposure reduction progress.
• Track and report key performance indicators (KPIs) and key risk indicators (KRIs).
• Support enterprise risk management initiatives.
• Evaluate vulnerabilities within the context of business risk.
• Facilitate risk-based decision-making regarding remediation versus risk acceptance.
• Align vulnerability management activities to regulatory and security frameworks.
• Incorporate internal and external threat intelligence into vulnerability prioritization.
• Monitor CISA Known Exploited Vulnerabilities (KEV) catalog and other threat intelligence sources.
• Prioritize remediation activities based on active exploitation trends.

Qualifications

• Bachelor's Degree directly related to the position or equivalent, preferred.
• Minimum five years experience.
• Minimum three years supervisory or leadership experience.
• Ability to organize and manage multiple priorities simultaneously.
• Ability to work well independently or within a team.
• Excellent interpersonal communication skills required.
• Must be able to handle confidential matters with discretion.
• Excellent verbal and written communication skills required.
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.
• Commitment to company values.
• Customer Service - Proactive attention to each person.
• Integrity - Do and say what's right.
• Respect - Treat others with dignity.
• Collaboration - Listen and work together.
• Learning - Seek knowledge and strive for improvement.
• Excellence – Deliver the unexpected.

Supervision

Job Scope: Plays a key role in area by generating insights and ideas on policies, processes, procedures, and efficiency; contributes ideas to strategic and operational plans to ensure alignment.

Complexity: Problems encountered often cross areas of the organization and are often complex, broad in scope, and unprecedented with no clear solution; often works cross-functionally to solve problems and implemented changes.

Impact: Decisions and actions have a direct impact on the outcomes of the department, projects, and programs.

Interaction/Supervision: Acts as a mentor/guide to less experienced professional contributor staff in a similar role; works independently and only under general direction; guided by professional standards, desired outcomes, and project plan specifications.

Requirements

• Work is primarily sedentary; mobility in an office setting.
• Ability to operate standard office equipment and keyboards.
• Ability to accurately interpret sounds and associated meanings at a volume consistent with interpersonal conversation.
• Office environment – moderate noise, no substantial exposure to adverse environmental conditions.
• Travel 5% or less.
• Must be able to adhere to process protocol. Must be able to apply established protocols in a timely manner.
• Work is primarily performed during the business week, Monday - Friday.

Guild offers a pleasant work environment, competitive compensation and excellent benefits package; including medical, dental, vision, life insurance, AD&D, LTD and 401(k) with employer match.

Guild Mortgage Company is an Equal Opportunity Employer.

REQ#: VULNE018364