Senior Manager Vulnerability Management

What You Need To Know

 

Open the door to a groundbreaking tech career with an industry leader. Southern Glazer’s Wine & Spirits is North America’s preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we’re heavily invested in the most transformative new technologies – and the most brilliant tech professionals. Southern Glazer’s was named by Newsweek as a Most Loved Workplace and is included on the Forbes lists for Largest Private Companies and Best Employers for Diversity.

 

As a full-time employee, you can choose from a full menu of our Top Shelf Benefits, including comprehensive medical and prescription drug coverage, dental and vision plans, tax-saving Flexible Spending Accounts, disability coverage, life insurance plans, and a 401(k) plan. We also offer tuition reimbursement, a wellness program, parental leave, vacation accrual, paid sick leave, and more.

 

We offer continuous learning and career growth in a fast-paced environment where you are respected, your voice is heard, and technology is part of our strategy for success. If you’re looking to fill your glass with opportunity, come join our FAMILY.

Overview

 

The Senior Manager, Vulnerability Management role will manage the Vulnerability Management team. This position is responsible for leading a team of Vulnerability Management professionals that identify, assess, and partner with other teams and application owners to remediate security vulnerabilities. This role will work closely with other teams and application owners to provide guidance on patching software and hardware vulnerabilities that have been identified in Enterprise and OT environments.

Specialized Skills and Technologies

 

• Proficient in using vulnerability scanning and assessment tools for OT and Enterprise Environments
• Able to communicate the impact of a vulnerability effectively including what it affects, how it is exploited, and the result of exploitation
• Possess deep understanding of multiple Operating Systems (Windows, Linux, AIX, etc.) and how vulnerabilities impact them
• Solid knowledge of current and emerging technologies
• Excellent teaching, problem-solving, communication, and interpersonal skills
• Solid understanding of networking, systems, and security related technologies
• Extensive knowledge of cybersecurity principles, threats, and attack types
• Solid understanding of security frameworks such as NIST, ISO 27001, etc.
• Understanding of how to perform incident response and assist in investigations with relation to an exploited vulnerability 
• Knowledge of vulnerability information sources and how they are used is mandatory
• Ability and desire to lead and the flexibility to also share the duties of the technical team
• Willingness to mentor, train, and share knowledge with peers
• Ability to build and maintain relationships, provide mentorship, and present ideas in an effective manner
• Ability to utilize staff strengths, develops staff in weak areas, and constructively address staff performance problems

Primary Responsibilities

 

• Develops and maintains a vulnerability management strategy to include patching strategies, prioritization of vulnerabilities, and ensuring remediation SLAs are met
• Works closely with system administrators, developers, and application owners to ensure remediation is performed within the SLA window
• Utilizes vulnerability scanning tools and software to identify vulnerabilities
• Present reports that document upwards and downward trends, remediation efforts, and progress to management
• Manages internal operations projects that may require cross-department resources and coordination
• Provides analysis and prioritization of vulnerabilities based on severity, impact, and exploitability
• Manages all facets of vulnerability management including Operational Technology (OT) environments
• Detects and responds to security threats by implementing various continuous monitoring tools in major cloud environments
• Follows up with teams responsible for patching to ensure vulnerabilities are being addressed in a timely manner
• Ensures that vulnerability management processes are followed and aligned with internal security policies and best practices
• Collaborates with other security teams to ensure policies, procedures, and standards are in place and maintained
• Analyzes activities and documented resolutions, identifies problem areas, devise, and deliver solutions to enhance quality of service and prevent future issues
• Defines key operational metrics, develop reporting, and sets targets to continuously imp