Vulnerability & Risk Management Manager

Job Description
This role is a senior, hands-on Vulnerability & Risk Management Manager responsible for leading and maturing the enterprise vulnerability management and risk reduction program across infrastructure, cloud, and applications. Day to day, this person will own the full vulnerability management lifecycle — scanning, ingestion, normalization, prioritization, remediation tracking, and reporting — while transitioning the program from volume-based CVE tracking to risk-based prioritization aligned with business impact and exploitability. They will establish and enforce SLAs by severity and asset criticality, correlate vulnerability data with threat intelligence (active exploitation, CISA KEVs), asset exposure, and business impact, and lead risk acceptance and exception processes with proper documentation. A major part of the role is driving remediation at scale by working cross-functionally with infrastructure, endpoint, cloud/platform, application, and incident response teams...