Vulnerability Management Lead

Job Description: Vulnerability Management Lead

Role Summary

The Vulnerability Management Team Lead is responsible for leading the enterprise vulnerability management program, with a primary focus on risk-based prioritization, coordinated remediation, and executive reporting. This role ensures that vulnerabilities are effectively triaged, owned, remediated, and measured, reducing overall organizational risk exposure. The position serves as the operational bridge between security, infrastructure, application teams, and leadership. ---

Position Responsibilities

Vulnerability Prioritization & Risk Management

· Lead enterprise vulnerability prioritization by leveraging vulnerability intelligence (VM, ASM, CTEM) into risk-prioritized, actionable work

· Establish and enforce vulnerability SLAs aligned to risk tiers.

· Drive risk-based decision-making, including mitigation, remediation, or formal risk acceptance.

· Continuously improve prioritization models leveraging exposure management data and business context.

· Validate data quality and eliminate false positives.

Remediation Execution & Coordination

· Lead cross-functional remediation efforts across infrastructure, application, and business teams.

· Ensure clear ownership and accountability for all vulnerabilities.

· Drive remediation through structured workflows and automation platforms.

· Escalate risks when remediation timelines are not met.

Minimum Qualifications

· 7 years in cybersecurity with experience in vulnerability management or exposure management.

· Experience leading teams or cross-functional initiatives.

· Strong understanding of the vulnerability lifecycle and risk-based prioritization.

· Strong reporting and analytics skills.

Preferred Qualifications

· Experience with ASM/CAASM, SOAR, and Exposure Management platforms as well as Enterprise Vulnerability Management tools (e.g., Qualys, Wiz, Defender, Armis, Swimlane VRM, Elastic).

· Familiarity with NIST, CIS frameworks, and regulatory requirements.

· Experience maturing or building vulnerability management programs.