Vulnerability Manager

Location: Pittsburgh, PA (Hybrid)

Classification: Exempt

Status: Full-Time

Reports to: Director, Information Security

Purpose

The Vulnerability Manager is responsible for leading the organization's vulnerability management program, ensuring the timely identification, assessment, prioritization, remediation, and reporting of security vulnerabilities across infrastructure, applications, cloud environments, and endpoint systems. This role partners with IT, Software Development, and business stakeholders to reduce cybersecurity risk, improve security posture, and maintain compliance with organizational policies and regulatory requirements. The position will initially lead one direct report and is expected to build and develop the vulnerability management function as organizational needs evolve.

Responsibilities

• Manages enterprise vulnerability scanning and assessment activities across networks, systems, cloud platforms, databases, applications, and endpoints.
• Evaluates vulnerability scan and penetration test results to determine business risk, exploitability, and remediation priorities.
• Coordinates with system owners, infrastructure teams, and application teams to remediate identified vulnerabilities.
• Tracks remediation efforts and validate closure of vulnerabilities through rescanning and testing.
• Prepares reports, dashboards, and metrics for leadership on vulnerability trends, remediation progress, and overall risk posture.
• Maintains vulnerability management policies, standards, procedures, and service-level objectives (SLOs) for remediation.
• Supports compliance requirements and audits related to vulnerability management, patch management, and cybersecurity controls.
• Monitors emerging threats, vendor advisories, and security bulletins to identify vulnerabilities that may impact organizational assets.
• Continuously improves scanning coverage, risk scoring methodologies, and vulnerability management processes.
• Provides leadership, direction and performance management for the Vulnerability Management team
• Coaches, mentors, and develops team members to build technical expertise and support career growth
• Establishes team goals, priorities, and workload management to ensure effective execution of vulnerability management activities
• Identifies future staffing, capability, and resource needs to support the continued growth and maturity of the vulnerability management program

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
• 5-7 years of experience in cybersecurity, vulnerability management, security operations, or related disciplines.
• Experience managing enterprise vulnerability management programs and coordinating remediation efforts across multiple technology teams.
• Demonstrated experience leading, mentoring, or supervising cybersecurity professionals and/or technical teams.
• Strong knowledge of vulnerability management methodologies and qualitative risk assessment practices.
• Experience with vulnerability management tools such as Rapid7, GitHub Advanced Security, or similar platforms.
• Knowledge of operating systems, Microsoft Azure, network technologies, and common security vulnerabilities.
• Strong analytical, project management, and stakeholder communication skills.
• Ability to translate technical findings into business risk and actionable remediation plans.

Preferred Qualifications

• CISSP, GSEC, GCIA, GCIH, CRISC, Security+, or other relevant cybersecurity certifications.

Work Environment

This job operates in a home office and professional office environment. When in-office this role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines, and communications via MS Teams.

Physical Demands

While performing the duties of this job, the employee is regularly required to sit, see, talk or hear. The employee frequently is required to stand; walk; use hands and fingers to handle or feel; and reach with hands and arms. Visual acuity is necessary for tasks such as reading, observing surroundings, and working with various forms of data on a screen. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job

Benefits:

Hybrid, remote and flexible on-site work schedules are available, based on the position. PANTHERx Rare Pharmacy also affords an excellent benefit package, including but not limited to medical, dental, vision, health savings and flexible spending accounts, 401K with employer matching, employer-paid life insurance and short/long term disability coverage, and an Employee Assistance Program! Generous paid time off is also available to all full-time employees, as well as limited paid time off for part-time employees. Of course we offer paid holidays too!