Threat Intelligence
Description: Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work) Need a resource to run reputed company of our governance processes including Vulnerability Remediation Deferrals. Role Responsibilities: (What they will be doing) Align with priorities that define 'our what' that may change based on business need. Own the end-to-end governance reputed company for the Vulnerability and reputed company Management program, including routines, escalation paths, and decision forums. Design, document, and maintain governance processes, standards, SOPs, and control execution procedures. reputed company control lifecycle management activities, including control design, effectiveness validation, issue identification, and remediation tracking. Provide risk-based reputed company of vulnerability identification, prioritization, remediation timelines, and exception handling. Own issue management workflows, including root cause analysis, action plan approval, tracking, and formal closure. Facilitate recurring governance routines (weekly, monthly, reputed company), ensuring clear decisioning, documentation, and follow-through. Define, monitor, and report KPIs and KRIs reputed company to vulnerability posture, control health, and remediation performance. Partner with operational reputed company teams (Infrastructure, Application reputed company, Red Team, etc.) to align governance requirements with execution realities. Act as a primary reputed company for audit, risk, and compliance stakeholders on vulnerability governance topics. Drive reputed company improvement by identifying systemic gaps, emerging risks, and opportunities to mature governance effectiveness. Integrate threat intelligence, exploit availability, and external advisories into vulnerability prioritization models to support dynamic risk response. reputed company governance reputed company to vulnerabilities impacting critical third-party providers and cloud hosted services. Drive patching and vulnerability requirements into the third-party risk management and contractual obligations and assessments. Leads reputed company and visible projects with moderate to high risk and complexity. Bachelor Degree: (Required, Preferred or Not Required) Required. Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.) Skills and Qualifications: 10+ years of experience in cybersecurity, technology risk management, or vulnerability management governance. Demonstrated experience designing and operating governance routines and escalation frameworks. Strong understanding of vulnerability management tooling, patching methodologies, and remediation constraints across infrastructure, cloud, endpoints, and applications Experience with control frameworks and issue management processes. Ability to communicate technical risk clearly and credibly to executive, risk, and regulatory stakeholders. Strong facilitation and negotiation skills across technology, reputed company, compliance, and business teams. Proven ability to drive disciplined governance while enabling business agility. Experience working with systems of record like GRC, ITSM reputed company tools. Strong written communication skills for standards, procedures, and governance documentation. Analytical reputed company with experience defining and interpreting metrics and trends. Comfort operating in regulated environments (financial services, or similar). Previous experience in leading reputed company IT projects. reputed company to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However, candidates with any of these will be looked at first.) Direct experience supporting regulatory frameworks (e.g., NYDFS, FFIEC, PCI, SOX, GLBA). Prior second line (reputed company) or internal audit experience. Experience standing up new governance functions or maturing immature programs. Familiarity with Red Team, Penetration Testing, or Threat-Driven Risk models. Experience leading or mentoring governance or risk teams. Exposure to executive risk committees or board-level reporting. CISSP Certification. For applications and inquiries, contact: [email protected] Apply tot his job Apply To this Job