Director, Vulnerability Management

Job Description

• Direct Cencora’s enterprise vulnerability management program across cloud, on-premise, endpoints, applications, containers, and third-party hosted environments.
• Set program strategy, architecture, policies, operating models, remediation SLAs, governance, KPIs, and KRIs, using risk-based exposure management and attack surface management.
• Lead vulnerability scanning, asset coverage, CVSS/threat-based prioritization, remediation validation, zero-day response, and reduction of critical exposure remediation time.
• Manage and develop vulnerability management analysts while partnering with IT operations, infrastructure, application, cloud engineering, penetration testing, red team, threat intelligence, and countermeasures teams.
• Requires a bachelor’s degree or equivalent experience, 10+ years in cybersecurity or related fields, 8+ years of progressive cybersecurity experience, 5+ years in vulnerability/security engineering/offensive/infrastructure security, 5+ years of management experience, and a relevant cybersecurity certification.