Manager - Global Information Security

The Manager - Threat Vulnerability Management (TVM) will be a key leader responsible for overseeing infrastructure vulnerability management, including Vulnerability Assessments (VA), Penetration Testing (PT), Red Teaming, and Blackbox testing of externally hosted infrastructure and applications. This role will lead and manage the central TVM tool, ensure thorough reporting across various leadership levels, handle security threat advisories, and oversee engagements with external vendors to ensure comprehensive and timely security assessments.

Key Responsibilities:

Infrastructure Vulnerability Management:

Lead Vulnerability Assessment (VA) and Penetration Testing (PT) for infrastructure.

Oversee Red Teaming exercises and Blackbox testing of externally hosted infrastructure and applications.

Identify, track, and mitigate vulnerabilities across the organizations infrastructure in line with industry best practices.

TVM Tool Management and Reporting:

Administer and optimize the Central TVM tool to enhance vulnerability identification, management, and remediation.

Prepare and deliver structured TVM reports to relevant stakeholders:

Weekly reports to the TVM Working Group.

Bi-weekly updates to functional and regional leadership teams.

Monthly briefings to global leadership.

Threat Intelligence and Security Advisory Management:

Monitor, assess, and act on security threat advisories from subscription sources.

Proactively identify and coordinate remediation for vulnerabilities impacting the organization s estate.

Conduct trend analysis and report on vulnerability and threat intelligence findings to enhance resilience.

Vendor Engagement and Management:

Lead engagement with external security vendors and partners for Red Teaming, Blackbox testing, infrastructure and application testing.

Develop and enforce Service Level Agreements (SLAs) with vendors to ensure timely completion of activities.

Review vendor performance to ensure alignment with agreed-upon project plans and SLAs, addressing any deviations or delays.

Compliance and Risk Management:

Ensure all vulnerability management processes align with regulatory, compliance, and internal security standards.

Collaborate with the security governance team to ensure that identified vulnerabilities and threats are managed in line with the organization s risk appetite.

Qualifications:

Bachelor s degree in Computer Science, Information Security, or a related field.

10+ years of experience in Threat Vulnerability Management, infrastructure security, or a related discipline.

Strong knowledge of vulnerability assessment, penetration testing methodologies, and best practices.

Experience in managing central TVM tools, conducting Red Team and Blackbox testing, and coordinating threat intelligence response.

Hands-on experience with tools like Qualys, Tenable, or other vulnerability management and threat intelligence platforms.

Proven vendor management experience with a strong understanding of SLAs, project planning, and performance review.

Skills and Abilities:

Excellent communication skills for structured reporting and leadership engagement.

Strong analytical skills and ability to translate technical findings into actionable risk mitigation steps.

Strategic problem-solving and project management abilities to oversee end-to-end threat vulnerability management.

Team-oriented and capable of managing cross-functional and multi-regional collaboration.