Cybersecurity Remediation Manager

Responsibilities

• Lead, coach, and develop a team of Remediation Engineers, supporting career growth and setting clear expectations for execution, ownership, and technical quality.
• Foster a culture of accountability, collaboration, and continuous improvement within the team.
• Participate in hiring, onboarding, performance management, and succession planning.
• Provide technical guidance and review for remediation strategies, ensuring solutions address root causes and reduce recurring risk.
• Guide the appropriate use of automation and AI‑assisted tooling in remediation workflows while maintaining human judgment, security, and compliance requirements.
• Prioritize remediation efforts based on enterprise risk, impact, and feasibility.
• Balance hands‑on technical engagement with delegation and oversight as appropriate.
• Support engineers during high‑severity incidents, escalations, and complex remediation efforts.
• Coaching engineers on effective technical communication with non‑technical stakeholders.
• Partner with Security Operations, Incident Response, Product, and Infrastructure leaders to drive remediation outcomes.
• Influence remediation priorities and decisions across federated teams without direct authority.
• Translate technical remediation needs into clear risk‑based messaging for leadership and stakeholders.
• Resolve blockers related to ownership, prioritization, or execution of remediation work.
• Represent remediation efforts in leadership forums, communicating progress, tradeoffs, and risk in outcome‑focused language.
• Contribute to or define remediation standards, patterns, and best practices.
• Promote responsible adoption of automation and AI to improve remediation effectiveness and reduce MTTR.
• Identify systemic gaps and drive improvements to remediation processes, tooling, and workflows.
• Track and communicate remediation progress, trends, and risk reduction outcomes.
• Ensure alignment between remediation activities and broader CISO objectives.

Level, scope, and strategic responsibility will align with experience and band.

Bachelor's Degree

Bachelor's Degree

• Demonstrated experience leading technical teams in security, infrastructure, cloud, or platform engineering.
• Strong understanding of vulnerability management, incident response life cycles, and remediation practices.
• Ability to guide engineers through ambiguous, high‑pressure technical challenges.
• Proven ability to influence across organizations and drive outcomes without direct control.
• Strong communication skills, with the ability to translate technical issues into business and risk context.
• Experience operating in large, complex, federated enterprise environments.

• Experience managing or leading security remediation, vulnerability management, or post‑incident response efforts.
• Background in one or more technical domains: cloud, networking, operating systems, automation, or security platforms.
• Experience working with Agile or product‑aligned engineering teams.
• Experience applying enterprise security frameworks and risk management practices to prioritize and guide remediation decisions (e.g., NIST CSF, NIST 800‑series).
• Certifications are a plus but not required (e.g., CISSP, CISM, cloud security certifications).

IBM is proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.