Are you ready to help Qnity power the next leap in advanced electronics by reducing cyber risk before it becomes business impact? Do you want to lead a modern Threat and Vulnerability Management (TVM) program that combines asset visibility, threat intelligence, cloud security, and remediation governance to strengthen resilience across a global enterprise?
At Qnity, we are driven by our values of
Customer, Innovation, Speed, and People. As the
Vulnerability Management Lead, you will lead the enterprise Threat and Vulnerability Management program across IT, cloud, and operational environments. Working closely with infrastructure, engineering, application, cloud, and business teams, you will drive risk-based remediation, improve security visibility, and help ensure secure business operations.
Position SummaryThe Vulnerability Management Lead is responsible for the strategy, governance, and operation of Qnity's Threat and Vulnerability Management (TVM) program. This role drives the identification, prioritization, remediation, and reporting of vulnerabilities across enterprise environments while leveraging threat intelligence and business context to focus efforts on the risks that matter most.
The role partners closely with Cyber Threat Intelligence, Infrastructure, Cloud, Application Support, Compliance, and Service Delivery teams to reduce cyber risk and improve overall security posture.
Key ResponsibilitiesProgram Leadership- Lead and mature Qnity's Threat and Vulnerability Management program.
- Define governance, processes, remediation workflows, metrics, and reporting.
- Drive cross-functional accountability for vulnerability remediation.
Vulnerability & Exposure Management- Oversee enterprise vulnerability discovery across infrastructure, cloud, applications, and operational technology environments.
- Manage vulnerability assessment capabilities utilizing Tenable, Wiz, and related technologies.
- Improve asset visibility through CMDB, IPAM, and inventory integrations.
Risk-Based Prioritization- Prioritize vulnerabilities using threat intelligence, exploitability, asset criticality, business impact, and exposure context.
- Partner with Cyber Threat Intelligence to identify emerging threats, known exploited vulnerabilities, and zero-day risks.
- Focus remediation efforts on internet-facing systems, critical assets, and high-risk exposures.
Remediation Governance- Drive vulnerability remediation through ServiceNow workflows and escalation processes.
- Establish and monitor remediation SLAs, exception management, and risk acceptance processes.
- Coordinate emergency response activities for critical and actively exploited vulnerabilities.
Metrics & Executive Reporting- Develop dashboards and reporting in Tenable, Wiz, and Power BI.
- Track vulnerability aging, remediation performance, SLA compliance, risk exposure, and program maturity.
- Provide executive-level reporting and recommendations to leadership.
Continuous Improvement- Improve scan coverage, asset ownership, remediation workflows, and program effectiveness.
- Identify opportunities for automation, integration, and process optimization.
- Maintain alignment with security frameworks, compliance requirements, and industry best practices.
Qualifications- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, required.
- 8+ years of cybersecurity experience with at least 5 years in Vulnerability Management, Security Operations, Exposure Management, or related disciplines required.
- Experience leading enterprise vulnerability management programs.
- Strong knowledge of vulnerability prioritization methodologies, threat intelligence, remediation governance, and executive reporting.
- Hands-on experience with:
- Tenable
- Wiz
- ServiceNow
- Recorded Future
- Asset inventory / CMDB / IPAM platforms
- Strong communication, stakeholder management, and program leadership skills.
- Ability to influence and drive outcomes across multiple teams without direct authority.
Other Preferred Qualifications- Experience in cloud security, exposure management, or attack surface management.
- Familiarity with NIST CSF, CIS Controls, PCI, ISO 27001, or similar frameworks.
- Experience integrating vulnerability management platforms with ITSM and reporting solutions.
- Relevant certifications such as CISSP, CISM, CRISC, Security+, or vendor certifications.
Success MeasuresSuccess in this role will be measured by:
- Improved vulnerability visibility and asset coverage.
- Reduction in critical and high-risk vulnerabilities.
- Achievement of remediation SLA targets.
- Effective threat-informed prioritization and response.
- Increased remediation accountability across the organization.
- Executive visibility into cyber risk and vulnerability trends.
- Continuous improvement of the TVM program and supporting technologies.
Living the Qnity ValuesAt Qnity, success is measured not only by what we achieve, but how we achieve it.
- Customer: Partner with stakeholders to solve business challenges and deliver secure outcomes.
- Innovation: Continuously improve processes, technologies, and ways of working.
- Speed: Act with urgency and precision to reduce risk and address emerging threats.
- People: Build trusted relationships, collaborate across teams, and inspire positive change.
Join Qnity and help power the next leap in electronics by building a world-class Threat and Vulnerability Management program that protects the technologies shaping tomorrow.Join our Talent Community to stay connected with us!
