Tech Risk & Controls Lead – Vulnerability Management
Core
Lead enterprise governance, decision rights, and cross-functional accountability for the Vulnerability Management lifecycle across cloud, container, and hybrid environments.
Role type
Senior IC Tech Risk & Controls Lead (Vulnerability Management)
Builds
Enterprise governance frameworks, control towers, and auditable workflows for vulnerability discovery, remediation, and risk reporting.
Domain
Financial Services / Cybersecurity Risk & Governance
Deliverable
dashboards & analysis
Required skills
Vulnerability Management lifecycle expertise, governance charter design, RACI modeling, root-cause analysis, stakeholder influence, audit documentation, cloud/container security knowledge, automated control monitoring, AI-enabled governance validation
Preferred skills
CISSP/CISM/CRISC certifications, regulated financial services experience, AI-enabled governance tool familiarity, enterprise risk framework knowledge, executive reporting design
Technologies
Vulnerability Management platforms, cloud security tools, container security tools, enterprise data/reporting tools, AI governance tools
Responsibilities
Establish and maintain governance charters, operating models, and escalation paths; coordinate cross-functional collaboration on vulnerability strategy and roadmap; chair governance forums for decision-making; govern material changes to discovery rules and integrations; define and oversee enterprise metrics on coverage efficacy and control outcomes; partner with Audit and Compliance teams on regulatory engagements; advance automation and auditable workflows for governance decisions.
