Experience and in-depth understanding of key Vulnerability Management Process including Identification, Classification, Tracking, Remediation and Reporting.
Provide strategic direction on Infrastructure Vulnerability related topics (e.g., Software Vulnerabilities, Configuration Vulnerabilities)
Manage global Infrastructure Vulnerability Remediation effort which includes advising/guiding various global Infrastructure teams.
Manage the Infrastructure Vulnerability Remediation Program and associated process/controls.
Accurately report on status and progress to senior leadership and the broader Infrastructure organization.
Lead collaboration with Infrastructure teams to prioritize and track remediation efforts.
Maintain documentation related to Vulnerability assessments, remediation actions, and risk assessments.
Prepare reports and presentations for stakeholders on vulnerability status and remediation progress.
Stay updated on the latest security trends, vulnerabilities, and compliance requirements.
Support training and awareness initiatives related to vulnerability management across Infrastructure teams.
Leadership Skills: You will need Strong leadership capabilities who can excel in effective decision making, mentoring teams, and delivering results.
Ability to develop long-term strategies and align them with organizational goals. Also, ability to influence and inspire others toward achieving shared goals.
Capable of analyzing complex situations to make informed decisions.
Excellent verbal and written communication skills and ability to articulate vision and direction clearly to various stakeholders.
Ability to make critical decisions under pressure by balancing risk and opportunity while considering long-term impact.
Ability to inspire, motivate, and build cohesive teams with strong collaborative skills to foster partnerships with other teams/ stakeholders.
Skilled in negotiation and handling difficult conversations.
Qualifications:
Proven Risk professional with 12+ years of Risk and Controls experience.
7+ years of experience in Financial Services.
Flexibility working hours to cover North America Hours (till Noon Central Time)
Have a good understanding of the Vulnerability management process, how vulnerability management process integrated with the change management process, understanding of CVSS score, process around exceptions in case if fixes for vulnerability cannot be implemented etc.
Good understanding of financial services regulations, risks, and controls.
Internal Audit or Risk related Certification (CISA, CIA, CRISC, etc.) a plus.
Experience working at Big4 is a plus.
Initiative-taking, self-starter who deals well with ambiguity and can execute effectively.
Ability to challenge and influence stakeholders of differing viewpoints to reach consensus.