Sr. Vulnerability Advisor

About the role

The Senior Vulnerability Management Advisor serves as the central orchestrator for exposure management and risk reduction across a diverse portfolio of Label partners. This role bridges the gap between technical infrastructure findings, application vulnerabilities, and business-critical decision-making by translating complex data into actionable priorities.

Responsibilities

• Serve as the central contact for vulnerability and risk activities with Label partners, ensuring all assessments and remediation efforts align with internal standards and external regulatory obligations.
• Translate complex technical vulnerability findings into clear, actionable risk priorities tailored to specific business impact, data sensitivity, and operational feasibility.
• Cook up partnerships and establish remediation plans with Label partners and technical owners, securing formalized ownership, realistic timelines, and necessary resource commitments.
• Track remediation progress to identify blockers, and independently verify that implemented fixes or compensating controls effectively mitigate identified risks before closure.
• Proactively identify remediation delays and escalate unresolved or critical risks to information security and label leadership through established governance channels.
• Provide consistent guidance on patching, secure configuration, and preventative practices to drive a "shift-left" approach and reduce the recurrence of vulnerabilities.
• Lead high-level briefings between technical teams and label leadership to drive consensus on remediation priorities, resource trade-offs, and formal risk-acceptance decisions.
• Deliver concise, high-impact dashboards to label leadership that synthesize vulnerability posture and patching velocity into actionable insights, utilizing long-term trend analysis to identify systemic issues—such as recurring configuration errors—and propose holistic, cross-label remediation strategies.
• Maintain rigorous documentation of vulnerabilities, remediation status, and active risk exceptions within the enterprise risk register, ensuring all exceptions are technically justified, time-bound, and periodically reviewed.
• Identify opportunities to streamline vulnerability management processes and facilitate "Lessons Learned" sessions to share best practices and remediation strategies across all labels.

Requirements

• Minimum of 5 years in Information Security, focused on Vulnerability Management and Information Security Risk within a large-scale, decentralized, or multi-label corporate environment.
• Direct experience with ServiceNow Vulnerability Response (VR) and Application Vulnerability Response (AVR), specifically in building dashboards, managing assignment rules, and automating remediation tracking.
• Proven track record in managing risk registers, establishing remediation SLAs, and facilitating formal Risk Acceptance/Exception processes aligned with frameworks like NIST CSF, ISO 27001, or CIS.
• Exceptional ability to translate complex technical vulnerabilities into business-impact language for non-technical stakeholders and negotiate remediation priorities with senior IT and Business leadership.
• Comfort working cross-functionally with infrastructure, development, and support teams to drive remediation at scale.

Qualifications

• Professional information security or risk management certifications (e.g., CISSP, CRISC, or CISM) are highly preferred.
• Specialized security certifications (e.g., SecurityX/CASP+, CCSP, PNPT) are also highly preferred.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related technical field; equivalent professional experience and a history of driving continuous process improvement in security operations will also be considered.

Benefits

You will enjoy a Great Company Culture, Growth opportunities, Work Hard, Play Hard, and a comprehensive Benefits package including medical, dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, and more!