Manager, Threat & Vulnerability

Position Description

About Harris County and Universal Services:

Harris County Universal Services (Universal Services) is transforming the way the County does business and seeking a Manager, Threat & Vulnerability, to join our team. Universal Services is the enterprise IT solutions center for the departments and offices of Harris County, providing Information Technology, Public Safety and Justice Technologies, 311 Constituent Engagement Services, Fleet Services, and Records and Information Governance Services.

Harris County is the third largest and most diverse county in the nation, with a population of more than 4.7 million. Harris County Commissioners Court, the County’s governing body, directs a budget of more than $4 billion providing essential services including flood control, infrastructure, healthcare, housing, and justice administration. This is a great time to join Universal Services as we enhance critical services to Harris County residents and internal customers.

The Manager, Threat & Vulnerability Management (TVM) is responsible for safeguarding Harris County’s information systems and critical assets by leading the strategy, execution, and continuous improvement of the Threat & Vulnerability Management program. This role provides both strategic oversight and hands‑on leadership for projects, services, and personnel within the Cybersecurity Threat & Vulnerability team, ensuring effective identification, prioritization, and remediation of security risks across the organization.

The TVM Manager collaborates closely with infrastructure, SOC, GRC, and business stakeholders to align vulnerability management activities with county wide cybersecurity objectives, regulatory requirements, and risk‑based decision‑making.

• Manage daily administrative functions and performance evaluations for direct reports within the Threat & Vulnerability Management scope of work.
• Ensure the timely and high‑quality delivery of Cybersecurity services, including:
  • Vulnerability Scanning & Remediation
  • Threat & Vulnerability Advisory
  • Daily Threat Monitoring & Response
  • Incident Response
  • Firewall Change Requests Review and relevant approvals
• Lead or support projects such as multi‑factor authentication, advanced threat protection, cloud security, web filtering, web application testing, SOC development, artificial intelligence, centralized logging/SIEM, etc.
• Communicate security vulnerabilities and risk impacts effectively to stakeholders and support mitigation efforts.
• Analyze vulnerability data for root cause analysis and trend identification.
• Design and implement long‑term solutions to systemic security issues.
• Act as a subject matter expert on complex technical and business projects.
• Support Cybersecurity Incident Response Team (CIRT) investigations and resolution efforts.
• Review and refine cybersecurity policies in partnership with the CISO, standards, and procedures for strategic alignment.
• Evaluate and select cybersecurity products and vendors through proof‑of‑concepts and formal assessments.
• Oversee the development of documentation and training materials, including:
  • Project plans
  • Executive presentations
  • Technical reference documents
  • Training/job aids
  • Architecture diagrams
• Ensure consistent use of cybersecurity procedures and tools for vulnerability management and reporting.
• Stay informed about global threat landscapes, emerging technologies, and trends, and apply them to county operations.
• Balance business needs with security requirements and communicate trade‑offs clearly.
• Mentor junior managerial and technical staff.
• Perform other duties as assigned.

(Use the "Apply for this Job" box below). Employment Opportunity Plan .aspx

If you need special services or accommodations, please call  or email

This position is subject to a criminal history check. Only relevant convictions will be considered and, even when considered, may not automatically disqualify the candidate.

• High school diploma or G.E.D. from an accredited institution.

• Minimum five (5) years of progressive work experience in Information Security, IT, Computer…