Lead Vulnerability Management Analyst

At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident. 

We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You’ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you’ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.  

Join us for the opportunity to grow and make a difference in ways that matter to you. 

Role Summary

The Lead Vulnerability Management Analyst is responsible for overseeing the identification, assessment, prioritization, and remediation coordination of security vulnerabilities across the organization’s technology environment. This role provides technical leadership in vulnerability management operations, partners closely with infrastructure, application, cloud, and security teams, and helps drive continuous improvement of the organization’s security posture.

The ideal candidate combines deep technical knowledge of vulnerability management practices with strong leadership, communication, and risk-based decision-making skills.

Responsibilities

• Lead the enterprise vulnerability management program, including vulnerability scanning, analysis, prioritization, reporting, and remediation tracking.
• Review and validate vulnerability scan results from infrastructure, endpoints, applications, containers, cloud platforms, and other technology assets.
• Analyze vulnerabilities for exploitability, business impact, and remediation urgency using risk-based methodologies.
• Partner with IT, engineering, application development, cloud, and infrastructure teams to coordinate remediation activities and reduce risk.
• Establish and maintain vulnerability management processes, standards, procedures, and service level expectations.
• Provide guidance on remediation strategies, compensating controls, and exception handling where immediate remediation is not feasible.
• Monitor emerging threats, zero-day vulnerabilities, and industry advisories to assess organizational exposure and recommend response actions.
• Lead efforts to improve scanning coverage, asset visibility, reporting accuracy, and remediation effectiveness.
• Develop and present metrics, dashboards, and executive-level reporting on vulnerability trends, remediation performance, and risk posture.
• Support internal and external audits, regulatory requirements, and security assessments related to vulnerability management.
• Collaborate with incident response, threat intelligence, security operations, and governance teams to align vulnerability priorities with active threats and business risk.
• Mentor junior analysts and provide technical leadership across vulnerability assessment and remediation efforts.
• Evaluate and optimize vulnerability management tools, integrations, and automation capabilities.

Qualifications

Required:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field; or equivalent practical experience.
• 6+ years of experience in cybersecurity, with significant experience in vulnerability management, security operations, or infrastructure/application security.
• Strong understanding of vulnerability assessment tools and platforms such as Tenable, Qualys, Rapid7, or similar solutions.
• Experience analyzing vulnerabilities across operating systems, networks, databases, applications, cloud environments, and containers.