Vulnerability Remediation Operations Lead - Virtual

Alight Solutions Ltd; Illinois; On-site; USD 100,000 - 140,000; Full time

Job summary

Alight Solutions Ltd is seeking a senior cybersecurity professional to lead vulnerability remediation across diverse technology environments in the United States. You will partner with Security and technology teams to prioritize risk-based remediation, drive measurable improvements, and ensure compliance with governance standards.

The role demands deep expertise in vulnerability management, cloud security, and security tooling, plus strong communication to influence stakeholders and accelerate

Qualifications

• Experience in vulnerability management, cybersecurity, technology operations, service management, risk management, or a related field.
• Understanding of vulnerability management practices, including prioritization, remediation planning, exception management, validation, and reporting.
• Experience working with cross-functional teams in complex technology environments.
• Familiarity with enterprise infrastructure, cloud platforms, networking, applications, endpoint technologies, and security practices.
• Experience using vulnerability management or security tools such as Tenable, Qualys, Rapid7, Microsoft Defender, or similar platforms.
• Familiarity with ServiceNow Vulnerability Response/Management or comparable workflow and ticket management solutions.
• Analytical skills with the ability to interpret data, identify trends, and communicate actionable insights.
• Demonstrated ability to influence outcomes, build partnerships, and drive accountability across teams in a collaborative and inclusive manner.
• Professional certifications such as CISSP, CISM, CRISC, Security+, ITIL, PMP, or equivalent credentials.
• Experience supporting cloud security, DevSecOps, compliance, audit, or enterprise governance initiatives.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or an equivalent combination of education, training, and experience.

Responsibilities

• Leading and coordinating vulnerability remediation activities across technology teams to reduce enterprise risk and support business objectives.
• Ensuring vulnerabilities are assigned appropriately, with clear ownership, remediation plans, timelines, and documented outcomes.
• Maintaining visibility into vulnerability remediation efforts across infrastructure, cloud, applications, platforms, networks, and end-user technologies.
• Partnering with Security and technology teams to prioritize remediation based on risk, business impact, operational needs, and compliance requirements.
• Fostering collaboration across technical and business stakeholders to resolve vulnerabilities, remove blockers, and drive timely remediation.
• Monitoring remediation performance, service-level commitments, and aging vulnerabilities, escalating issues and risks when appropriate.
• Serving as a trusted partner and primary point of coordination between Security and Technology teams for remediation planning, governance, and continuous improvement.
• Developing and present clear reporting, metrics, and insights for operational, leadership, audit, and governance audiences.
• Supporting vulnerability exception processes by facilitating documentation, reviews, approvals, and ongoing tracking.
• Identifying opportunities to improve remediation effectiveness through automation, process improvements, standardization, and enhanced tooling.

Skills

Vulnerability management

Cybersecurity

Cloud security

Security tooling

Risk management

Stakeholder influence

Analytical skills

Security certifications

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

Tenable

Qualys

Rapid7

Microsoft Defender

ServiceNow Vulnerability Response

Job description

Our Story

At Alight, we believe a company's success starts with its people. Alight embraces values that come directly from our people - purposeful, human, united and growth-minded - reflecting our inclusive culture and promise that our clients expect. We are passionate about connecting purpose with impact. Alight empowers clients to build a healthier and more financially secure workforce by unifying the benefits ecosystem across health, wealth, wellbeing, navigation, and absence management.

** Please NOTE: Applicants must reside in the United States in one of the 50 States or the District of Columbia in order to be considered for this role. **

**US Citizenship requirements- as this role supports services provided to the federal government and/or a federal government contractor, proof will be required to verify US citizenship status at time of hire.**

Our Benefits

With a comprehensive total rewards package, Alight offers programs and plans that support your mind, body, wallet, and life. Benefits include health, dental and vision coverages starting Day One. Additionally, Alight colleagues enjoy wellbeing programs, retirement plans with contribution matching, generous

time off, parental leave, continuing education, and career growth opportunities - all within a thriving global organization.

Flexible Working

So that you can be your best at work and home, we consider flexible working arrangements wherever possible. Alight has been a leader in the flexible workspace and \"Top 100 Company for Remote Jobs\" 6 years in a row.

Great Place to Work

Thanks to the work of every colleague, Alight has received multiple awards of recognition including \"Great Place to Work\" for the past 7 years and Fortune's \"Best Companies to Work For.\"

Key Responsibilities

• Leading and coordinating vulnerability remediation activities across technology teams to reduce enterprise risk and support business objectives.


• Ensuring vulnerabilities are assigned appropriately, with clear ownership, remediation plans, timelines, and documented outcomes.


• Maintaining visibility into vulnerability remediation efforts across infrastructure, cloud, applications, platforms, networks, and end-user technologies.


• Partnering with Security and technology teams to prioritize remediation based on risk, business impact, operational needs, and compliance requirements.


• Fostering collaboration across technical and business stakeholders to resolve vulnerabilities, remove blockers, and drive timely remediation.


• Monitoring remediation performance, service-level commitments, and aging vulnerabilities, escalating issues and risks when appropriate.


• Serving as a trusted partner and primary point of coordination between Security and Technology teams for remediation planning, governance, and continuous improvement.


• Developing and present clear reporting, metrics, and insights for operational, leadership, audit, and governance audiences.


• Supporting vulnerability exception processes by facilitating documentation, reviews, approvals, and ongoing tracking.


• Identifying opportunities to improve remediation effectiveness through automation, process improvements, standardization, and enhanced tooling.

Requirements

• Experience in vulnerability management, cybersecurity, technology operations, service management, risk management, or a related field.


• Understanding of vulnerability management practices, including prioritization, remediation planning, exception management, validation, and reporting.


• Experience working with cross-functional teams in complex technology environments.


• Familiarity with enterprise infrastructure, cloud platforms, networking, applications, endpoint technologies, and security practices.


• Experience using vulnerability management or security tools such as Tenable, Qualys, Rapid7, Microsoft Defender, or similar platforms.


• Familiarity with ServiceNow Vulnerability Response/Management or comparable workflow and ticket management solutions.


• Analytical skills with the ability to interpret data, identify trends, and communicate actionable insights.


• Demonstrated ability to influence outcomes, build partnerships, and drive accountability across teams in a collaborative and inclusive manner.


• Professional certifications such as CISSP, CISM, CRISC, Security+, ITIL, PMP, or equivalent credentials.


• Experience supporting cloud security, DevSecOps, compliance, audit, or enterprise governance initiatives.


• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or an equivalent combination of education, training, and experience.

Application and Interview

By applying for a position with Alight, you understand that, should you be made an offer, it will be contingent on your undergoing and successfully completing a background check consistent with Alight's employment policies. Background checks may include some or all the following based on the nature of the position: SSN/SIN validation, education verification, employment verification, and criminal check, search against global sanctions and government watch lists, credit check, and/or drug test. You will be notified during the hiring process which checks are required by the position.

Alight requires all virtual interviews to be conducted on video. Please be aware that Alight is a camera-on culture and may require occasional travel to one of our physical office locations.

Our commitment to Inclusion

We celebrate differences and believe in fostering an environment where everyone feels valued, respected, and supported. We know that diverse teams are stronger, more innovative, and more successful.

At Alight, we welcome and embrace all individuals, regardless of their background, and are dedicated to creating a culture that enables every employee to thrive. Join us in building a brighter, more inclusive future.

As part of this commitment, Alight will ensure that persons with disabilities are provided reasonable accommodations for the hiring process. If reasonable accommodation is needed, please contact [e-mail].

Equal Opportunity Policy Statement

Alight is an Equal Employment Opportunity employer and does not discriminate against anyone based on sex, race, color, religion, creed, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, marital or domestic partner status, citizenship, military or veteran status, sexual orientation, gender, gender identity or expression, genetic information, or any other legally protected characteristics or conduct covered by federal, state, or local law. In addition, we take affirmative action to employ disabled persons, disabled veterans, and other covered veterans.

Alight provides reasonable accommodations to the known limitations of otherwise qualified employees and applicants for employment with disabilities and sincerely held religious beliefs, practices and observances, unless doing so would result in undue hardship. Applicants for employment may request reasonable accommodations/modifications by contacting their recruiter.

Authorization to work in the Employing Country

Applicants for employment in the country in which they are applying (Employing Country) must have work authorization that does not, now or in the future, require sponsorship of a visa for employment authorization in the Employing Country and with Alight.

Note, this job description does not restrict management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

Salary Pay Range

Minimum: 100,000.00 USD

Maximum: 140,000.00 USD

Pay Transparency Statement: Alight considers a variety of factors in determining whether to extend an offer of employment and in setting the appropriate compensation level, including, but not limited to, a candidate's experience, education, certification/credentials, market data, internal equity, and geography. Alight makes these decisions on an individualized, non-discriminatory basis. Bonus and/or incentive eligibility are determined by role and level. Alight also offers a comprehensive benefits package; for specific details on our benefits package, please visit: Wellbeing and Benefits Selector Page - Alight

DISCLAIMER: Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

Alight Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, pregnancy, childbirth or related medical condition, veteran, marital, parental, citizenship, or domestic partner status, or any other status protected by applicable national, federal, state or local law. Alight Solutions is committed to a diverse workforce and is an affirmative action employer.