Manager- Threat and Vulnerability Management

Design, implement, and mature the enterprise-wide Vulnerability Management Program aligned with business risk appetite.

Establish standardized processes for vulnerability identification, assessment, prioritization, remediation, and validation.

Define and enforce risk-based remediation SLAs based on asset criticality and exposure.

Oversee vulnerability scanning across networks, endpoints, databases, applications, APIs, and cloud platforms.

Ensure coverage across internal assets, internet-facing systems, and third-party integrations.

Establish and operationalize a Threat Intelligence capability to monitor emerging threats, attack vectors, and adversary tactics.

Correlate threat intelligence with internal vulnerabilities to identify exploitable risks.

Track global threat trends (e.g., ransomware, zero-day exploits, supply chain risks) and assess organizational exposure.

Provide actionable threat insights to SOC, incident response, and leadership teams.

Drive risk-based vulnerability prioritization using CVSS, exploitability, threat context, and business impact.

Integrate vulnerability data with enterprise risk registers and GRC platforms.

Work closely with IT, DevOps, cloud, and application teams to ensure timely remediation.

Track remediation progress, exceptions, and compensating controls.

Establish governance forums to review vulnerability posture and drive accountability.