Manager, Information Security

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services.  Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results.  We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.  Join our dynamic team and make your mark on the payments technology landscape of tomorrow. 

Summary of This Role

Develops and leads Vulnerability Management (VM) Program within Cyber Security. Manages the development, deployment and execution of enterprise VM Program. Monitors, analyzes and exploits system vulnerabilities to detect potential threats. Executes containment, mitigation and protection improve Security posture while maintaining critical documentation and evidence. Determines risk and exposure from security breaches and resolves incidents while providing guidance to business decision-makers.

What Part Will You Play?

• Review and analyze vulnerability data to identify trends, assess risk, assign remediation, and track progress.

• Performing analysis on vulnerabilities which are reported via regular scans to identify new vulnerabilities and track changes in security posture. 

• Collaborating with Infra, Application owners , relevant Cloud and other IT teams to drive remediation for identified vulnerabilities. 

• Ensuring compliance with established security policies and industry standards regarding vulnerability management. 

• Optimizing scanning processes to improve efficiency and accuracy

• Identifying areas for improvement within the Vulnerability management program. 

• Implementing new strategies and best practices to enhance vulnerability management effectiveness. 

• Proactively identifying potential risks based on industry trends and reports from threat intelligence. 

• Manages remediation of results from penetration tests

• Monitoring emerging threats and vulnerabilities in the cybersecurity landscape. 

• Recommends and institutes remediation techniques or improvements to protect and maintain security frameworks and controls.

• Generating comprehensive reports detailing discovered vulnerabilities, risk levels, and mitigation strategies for stakeholders. 

• Communicating security risks and remediation needs to relevant teams and executives

• Supports the evaluation and selection of security applications and systems.

• Provides quality review on the evaluation and documentation of team procedures.

• Manages development, deployment and support activities for multiple critical security technologies to include problem resolution and management, application maintenance, project requests and system enhancements.

• Not an exhaustive list; other duties as assigned.

What Are We Looking For in This Role?

Minimum Qualifications

• Bachelor's Degree
• Relevant Experience or Degree in: Information Security or Computer Science preferred. Other majors will be considered.
• Typically a minimum of 6 years
• related professional experience and prefer a minimum of 1-2 years experience in a supervisory position.
• One or more of the following-CISSP, CISA, CISM, PCI-QSA, PA-QSA, PCIP, CRISC, CGEIT, Certified Forensic Computer Examiner (CFCE), Certified Cyber Threat Analyst (CCTA), Certified Computer Examiner (CCE)

Preferred Qualifications

• Prior Global Payments, payment or technology industry experience is preferred.
• Master's Degree in a related field of study from an accredited university.

What Are Our Desired Skills and Capabilities?

• Expertise in vulnerability management tools and methodologies 

• Deep understanding of network security concepts, operating systems, and application security 

• Strong analytical and problem-solving skills to assess risks and prioritize vulnerabilities 

• Excellent communication skills to convey security risks and remediation plans to technical and non-technical audiences 

• Knowledge of relevant security standards and compliance requirements 

• Ability to work collaboratively with vario