Remote Cyber Vulnerability Program Manager
Job Description
Insight Global is looking for a remote Vulnerability Cyber Program Manager. The Vulnerability Management Program Manager is a senior technical role responsible for designing, driving, and maturing the enterprise vulnerability management lifecycle. This individual serves as the strategic and operational owner of vulnerability identification, prioritization, remediation tracking, and reporting across the organization's hybrid infrastructure environment.
Key Responsibilities Program Strategy & Governance- Own and mature the enterprise vulnerability management program, including policy, standards, procedures, and SLAs
- Define and maintain risk‑based vulnerability prioritization frameworks (CVSS, EPSS, threat intelligence, asset criticality)
- Develop and enforce remediation SLAs aligned to risk tiers and regulatory requirements (HIPAA, PCI‑DSS, NIST, etc.)
- Lead vulnerability management steering committee meetings and report program KPIs/KRIs to CISO and executive stakeholders
- Maintain program documentation, including remediation playbooks, escalation workflows, and exception management processes
- Manage and track remediation workflows and ticketing through Jira and Service Now, ensuring full lifecycle traceability
- Oversee vulnerability scanning operations across on‑premises, cloud (Azure/AWS/GCP), containers, and endpoints using Tenable
- Manage asset inventory and full attack surface visibility through Axonius as the centralized asset intelligence platform
- Drive external attack surface management programs leveraging Xpanse ASM to identify and reduce internet‑exposed risk
- Operate Crowd Strike Exposure Management to correlate endpoint telemetry with vulnerability risk for prioritized remediation
- Partner with infrastructure, cloud, and application teams to ensure full asset coverage and scan fidelity
- Lead patch and endpoint vulnerability remediation workflows integrated with Ivanti Cloud for lifecycle management
- Drive correlation of vulnerability findings with threat intelligence to prioritize exploitable, in‑the‑wild risks
- Partner with IT, Dev Ops, cloud engineering, and application security teams to drive timely remediation
- Facilitate exception and risk acceptance workflows with stakeholders, tracked in Service Now or Jira
- Coordinate with the SOC and Threat Intelligence teams to align vulnerability prioritization with active threat campaigns
- Drive Dev Sec Ops integration to shift vulnerability discovery left into CI/CD pipelines
- Establish and track metrics for mean time to remediate (MTTR) by risk tier using Jira dashboards and Service Now reporting
- Develop executive‑level dashboards and operational metrics reports (weekly, monthly, quarterly)
- Leverage Axonius asset data and Tenable scan results to produce accurate, comprehensive risk reporting
- Define and track program maturity against frameworks such as CMMI, NIST CSF, or custom maturity models
- Conduct trend analysis on vulnerability backlogs and aging to identify systemic remediation gaps
- Lead continuous improvement initiatives to increase program efficiency, coverage, and risk reduction velocity
- Report compliance posture against regulatory and audit requirements
Compensation: $60/hr to $64/hr exact compensation may vary based on several factors, including skills, experience, and education. Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).