Infrastructure Vulnerability Management Lead

Requirements

• Knowledge of common software, operating systems vulnerabilities, Unix/Linux
• Strong experience with Vulnerability Management Platforms such as Qualys, Rapid7, WIZ in a large corporate environment
• Understanding of cybersecurity organizational practices, operations risk management processes, architectural requirements, and vulnerability risk.
• Experience with controls or frameworks such as NIST
• Strong experience in reading and understanding vulnerability scans
• Exposure in solution design and plans

Responsibilities

• Provide oversight and direction to the technical team to work on vulnerability remediation.
• Develop strategy for risk-based vulnerability management for the customer.
• Collaborate closely with cross-functional teams to facilitate the timely remediation of vulnerabilities and misconfigurations, with a strong focus on effectiveness and risk management.
• Partner with Cybersecurity, Threat and Vulnerability management team and technology remediation groups to deliver shared outcomes that measurably improve in remediation of vulnerabilities.
• Lead solution discussions with Application team and with customer stakeholders
• Coordinate with OEM (Red Hat, Microsoft) and internal delivery teams to obtain remediation plan if the vulnerability is not OS related
• Experience in Tracking and reporting to Leadership team
• Maintaining Scorecards for metric reporting
• Knowledge of ITSM process and Knowledge management
• Experience in handling Governance meetings with Customer Leadership team