Director of Vulnerability Management

GEICO is seeking an enthusiastic and experienced Director to join our Vulnerability Management team. This individual will play a pivotal role in advancing our vulnerability management program, ensuring the security of our information systems and networks.  You will be responsible for leading and supporting the Vulnerability Management team and program. 

Position Description:

GEICO’s Vulnerability Management Director provides the necessary technical skills, analysis, design, leadership, organization, and management skills needed to support and drive the vulnerability management program.  The ideal candidate will support the team in creating deliverables for managing and remediating vulnerabilities identified in the environment, as well as owning and supporting the vulnerability scanning tools needed to support the program. 

Position Responsibilities 

As a Director, you will: 

• Develop, create, and implement a comprehensive vulnerability management program that aligns with our enterprise’s objectives and risk appetite. 

• Lead and manage a high-performing team of professionals, providing guidance, mentorship, and support to ensure their success and growth.  

• Maintain and update the organization's vulnerability management policies and procedures to ensure they still are effective in managing and addressing vulnerabilities to protect the organization from cyber threats. 

• Collaborate closely with cross-functional teams, including IT, Security, Compliance, and Business stakeholders to identify and prioritize vulnerabilities, and develop effective remediation plans.  

• Establish and maintain strong relationships with key stakeholders across the organization, ensuring that vulnerability management priorities are well understood and integrated into business processes.  

• Drive continuous improvements in vulnerability management processes and tools by leveraging industry-leading technologies, automation, and data-driven insights.  

• Stay current on industry trends, emerging threats and best practices in vulnerability management and adapt the program accordingly. 

• Evaluate and recommend vulnerability management tools and technologies, ensuring the optimal balance of effectiveness and efficiency.  

• Develop and deliver regular metrics, reports, KPIs and presentations to executive leadership and key stakeholders, communicating the status and effectiveness of the vulnerability management program. 

• Build a diverse vulnerability management program that covers secure software development lifecycle, patch governance, and application security. 

Qualifications: 

• Expert knowledge in vulnerability management programs and best practices. 

• Proven experience building and managing a successful comprehensive vulnerability management program.  

• Excellent communication and collaboration skills, with the ability to effectively communicate complex security topics to a diverse audience. 

• Strong knowledge of cybersecurity principals and best practices accompanied by experience in managing security risks. 

• Experience building and maintaining vulnerability metrics that can be easily understood and leveraged to reduce risk.

• Demonstrated ability to lead, manage, and mentor teams in a fast-paced dynamic environment to achieve high performance. 

• One or more of the following certifications is highly desired: Security + or Certified Information Security Manager (CISM) 

 

Experience: 

• 10+ years of experience in Information Security  

• 5+ years of experience in a leadership role within Vulnerability Management  

Education:

• Bachelors or master's degree in computer science, Cybersecurity, Information Security, or equivalent education or work experience 

#LI-AW1  

 

At this time, GEICO will not sponsor a new applicant for employment authorization for this position.

 

Benefits:

As an Associate, you’ll enjoy our Total Rewards Program* to help secure your financial future and preserve your health and well-being, including:

• Premier Medical, Dental and Vision Insurance with no waiting period**
• Paid Vacation, Sick and Parental Leave
• 401(k) Plan
• Tuition Reimbursement
• Paid Training and Licensures

*Benefits may be different by location.  Benefit eligibility requirements vary and may include length of service.

**Coverage begins on the date of hire. Must enroll in New Hire Benefits within 30 days of the