Director, Vulnerability Management

Welcome to Warner Bros. Discovery… the stuff dreams are made of.

Who We Are…

When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

*Must work a hybrid schedule (3 days onsite) out of our Atlanta office.*

THE JOB 

The Director, Vulnerability Management is a key leadership role within the Global Information & Content Security (GICS) team. This role leads and matures WBD’s enterprise-wide vulnerability management Center of Excellence (CoE) program, covering cloud, on-premises infrastructure, and application environments. The Director is responsible for directing the identification, classification, reporting, and remediation of vulnerabilities, ensuring alignment with WBD’s broader cybersecurity strategy. 

This position requires deep collaboration across cloud engineering, IT infrastructure, application development, and third-party service providers to effectively reduce the organization’s risk exposure. The Director will work closely with GICS and business unit leaders to ensure strategic and tactical vulnerability risk mitigation efforts align with enterprise goals. 

VULNERABILITY OVERSIGHT 

• Lead WBD’s program for managing vulnerabilities across on-prem infrastructure, cloud and applications; guiding the process from finding vulnerabilities, to mitigating risk. 

• Manage WBD’s MSSP to make sure scans are thorough and results are prioritized by how risky they are; assist and direct the process of resolving vulnerabilities and report on the status; and verify that the actions taken to fix them are working. 

• Drive vulnerability remediation with asset owners inline with established risk mitigation SLA’s.  

• Incorporate vulnerability risk into the broader GICS risk oversight framework, continuously evaluating the risk associated with the state of remediation SLA compliance. 

• Oversee vulnerability scanning activities across the enterprise, including automated, authenticated, and manual assessments. 

• Define and apply risk-based classification standards for vulnerabilities using CVSS and contextual asset/business impact. 

• Maintain dashboards and reporting for vulnerability risk metrics. 

• Establish SLAs for remediation, drive accountability, and verify remediation effectiveness. 

• Integrate vulnerability management into broader risk oversight and GICS governance. 

• Collaborate with DevSecOps, product engineering, and infrastructure teams to embed remediation into operational workflows. 

STRATEGIC LEADERSHIP 

• Translate vulnerability risk insights into strategic decisions and enterprise-wide policies. 

• Communicate effectively with senior leadership and executive stakeholders. 

• Contribute to the design of cybersecurity strategies by advising on risk reduction priorities related to vulnerability trends. 

• Develop metrics to track vulnerability closure rates, aged vulnerabilities, an