Director of Vulnerability Management - Remote

Overview

The Director of Vulnerability Management is a leadership role focused on transforming and accelerating vulnerability management into a core information security strength at CNA. This position is crucial in safeguarding the organization's assets by leading an enterprise-wide VM program and team, developing strategy, and managing vulnerabilities.

In Short

• Lead the Vulnerability Management program across global technology.
• Manage vulnerability scanning, reporting, and remediation.
• Develop and present metrics and performance reporting.
• Mentor and develop a team of vulnerability management professionals.
• Communicate vulnerability risks to senior leadership.
• Collaborate with application and infrastructure owners for remediation.
• Ensure compliance with policies and regulations.
• Oversee the secure configuration management process.
• Analyze vulnerability data to identify trends.
• Build partnerships with asset owners for effective remediation.

Requirements

• Bachelor's degree in Computer Science or related field.
• 6+ years in a vulnerability management program.
• Strong hands-on expertise with Tenable tools.
• Proven track record in leading vulnerability management teams.
• Excellent communication and interpersonal skills.
• Strong analytical and project management skills.
• Experience with MSP relationships and SLA enforcement.
• Expert understanding of security concepts and strategies.
• Experience in cloud and on-premises environments.
• CISSP, CISM, PMP, or equivalent certifications preferred.

Benefits

• Comprehensive and competitive benefits package.
• Opportunities for continuous learning and development.
• Commitment to employee engagement and inclusion.
• Support for physical, financial, emotional, and social wellbeing.
• Culture that promotes respect and collaboration.