Global Director – Vulnerability Management & Security Configuration

Key Responsibilities

• Define and lead the global strategy for vulnerability management and security configuration across: Infrastructure (on-prem & cloud), endpoints, and platform environments
• Transition capabilities from pre-AI to AI-enabled, including: Risk-based prioritization, Automation-led remediation, Threat-informed decisioning
• Align to CTEM principles and enterprise risk objectives
• Operate and scale a global vulnerability management program, including: Discovery, prioritization, remediation, and governance
• Implement security configuration and continuous compliance
• Implement risk-based models incorporating: Threat intelligence and exploitability, Asset criticality and external exposure, Enforce enterprise-wide policy and remediation standards
• Lead automation-first, API-driven capabilities across vulnerability lifecycle
• Integrate with enterprise platforms: Asset inventory, CI/CD, and change management systems
• Embed shift-left and continuous control practices across infrastructure lifecycles
• Define and enforce enterprise hardening baselines
• Implement continuous monitoring and drift detection
• Ensure alignment with regulatory and industry standards

Qualifications

• 12+ years in cybersecurity with deep experience in vulnerability management and security engineering
• Proven success building and scaling enterprise programs
• Strong background in: Infrastructure / cloud security, Configuration management and hardening, DevSecOps integration (platform-focused)
• Track record leading large-scale transformation initiatives