Director, Technical Vulnerability Management & Remediation Orchestration

NYC - 1211 Ave of the Americas

Full time

_55981

News Corp is a global, diversified media and information services company focused on creating and distributing authoritative and engaging content and other products and services. The company comprises businesses across a range of media, including: information services and news, digital real estate services and book publishing. Headquartered in New York, News Corp operates primarily in the United States, Australia and the United Kingdom, and its content and other products and services are distributed and consumed worldwide.

Director, Technical Vulnerability Management & Remediation Orchestration

SVP, Infrastructure & Enterprise Technology

NYC

Hybrid 3 days a week in office

$230,000 - $250,000 + Bonus

The Director of Technical Vulnerability Management (VM) & Remediation Orchestration is the global operational leader responsible for defining, driving, and scaling News Corp’s enterprise vulnerability remediation strategy. Reporting directly to the SVP, Infrastructure & Enterprise Technology, you will lead the central Vulnerability Remediation Services function, serving as the connective operational bridge between Enterprise Cyber Security, Technology Operations / Service Management, Infrastructure, and Business Unit (BU) leadership—including platform owners across Dow Jones, Harper Collins, , News Corp Australia, News UK, New York Post, News Corp HQ, and Global Technology.

In this role, you will strategically partner with Cyber Security (owners of core VM scanning tools and policy) and Tech Ops / Service Delivery (owners of the CMDB and asset topology) to ingest and leverage up-to-date, normalized risk data enabling presentation to platform owners.

Your core mandate is to leverage and mature existing reporting and ticket orchestration, driving remediation and compliance through defined Continuous Threat Exposure Management (CTEM) frameworks, ensure SLA compliance, and facilitate cadence-based reporting with Global Tech and business partners.

• Establish and execute a unified, global vulnerability remediation management strategy spanning cloud (AWS, Azure, GCP), infrastructure, applications, containerized workloads, and edge systems, leveraging Continuous Threat Exposure Management (CTEM) principles to systematically scope, discover, prioritize, validate, and mobilize remediation.

• Define and maintain enterprise-wide VM remediation processes, and associated SLAs tailored to asset criticality and business context.

• Partner with BU executives, engineering heads, and IT directors to align VM remediation policies and findings against operational constraints and product roadmaps.

• Act as primary operational partner with defined BU VM Champions and technical leads, providing actionable insights and highlighting bottlenecks in meeting remediation SLAs

• Partner with Cyber Security leads to continuously evaluate scanning coverage (SAST/DAST/SCA, CSPM, EASM) to ensure vulnerability detection feeds align with evolving threat models, policy requirements, and vendor consolidation strategy to maximize ROI.

• Establish and govern standardized global vulnerability remediation workflows, patch windows, maintenance schedules and remediation cadences across all critical infrastructure and application tiers, driving consistent accountability across global BUs.

• Establish and maintain an enterprise Responsibility Matrix (RACI) clearly defining ownership and handoffs between centralized vulnerability management, cyber security functions, shared infrastructure…