Senior Manager, Threat and Vulnerability Management

Job Description WHAT YOU'LL DO: Vulnerability Assessment & Management • Own and evolve the end-to-end continuous vulnerability management program across multi-cloud, modern infrastructure, and legacy environments. • Define risk-based prioritization logic combining vulnerability severity (CVSS), asset criticality, and active exploitability metrics. • Collaborate closely with ICT, SRE, and business unit stakeholders to enforce remediation timelines and drive patching accountability without disrupting business operations. • Establish metrics, SLAs, and executive dashboards to communicate enterprise exposure and remediation progress to senior leadership. Penetration Testing & Red Teaming • Define the operational strategy and schedule for penetration testing and objective-based red teaming exercises. • Manage internal specialists and external vendors/penetration testers to ensure comprehensive coverage, clear scope definition, and high-quality deliverables. • Oversee post-assessment remediation validation to ensure identified security gaps are properly addressed. Threat Intelligence & Threat Hunting • Build and integrate a Cyber Threat Intelligence (CTI) program to gather, analyze, and act upon emerging threat indicators and adversary TTPs (MITRE ATT&CK framework). • Direct proactive threat hunting campaigns across endpoints, identity, and cloud environments to uncover hidden, undetected adversaries or security weaknesses. • Feed threat intelligence and hunting findings back into detection tools, threat models, and vulnerability prioritization engines. Stakeholder Management & Strategic Leadership • Serve as the primary security partner and strategic interface for system owners, software developers, infrastructure teams, and third-party vendors. • Influence and negotiate remediation priorities with senior business and technical leaders, balancing cyber risk reduction against operational impact. • Evaluate, implement, and optimize TVM and offensive security technology stacks (scanners, pentesting toolkits, threat intel feeds). Team Leadership and Development • Build, mentor, and lead a high-performing team of vulnerability management analysts, penetration testers, and threat researchers. • Provide hands-on technical guidance during complex technical deep-dives, exploit evaluations, and attack surface reviews. • Foster a culture of technical rigor, continuous learning, and innovation within the offensive and proactive security domains. WHO YOU ARE: • 10+ years of experience in Cyber Security, with a strong focus on Vulnerability Management, Penetration Testing, Threat Intelligence, and Red Teaming. • Technically apt with deep understanding of exploit mechanisms, risk scoring frameworks (CVSS, EPSS), cloud security, network architecture, and security tooling • Proven ability to lead and motivate teams, build strong relationships, and influence decision-making at all levels. • Bachelor's degree in Computer Science, Information Security, or a related technical field. • Excellent communication skills, capable of translating complex attack vectors and security risks into actionable business insights. • Relevant industry certifications (e.g., OSCP, GXPN, GPEN, CISSP, CISM, or equivalent) are highly advantageous.