Cybersecurity Manager - Vulnerability Management

The  Cybersecurity Vulnerability Management Manageris responsible for leading the team that identifies, evaluates, and mitigates vulnerabilities within the company’s IT infrastructure. Key responsibilities include scanning visibility, syncrnization with IT patch management, vulnerablity remediation management, exeption management and the generation of appropriate metrics and process management. The incumbent will oversee cross-functional initiatives that require coordination between internal IT, business teams and external vendors. The principal objective will be to guide, influence, and negotiate with key decision-makers to ensure adherence to our vulnerability management requirements and SLAs. 

The VM leader will collaberate directly the PSG IT organization, DT infrastructure and the Cybersecurity team to ensure appropriate processes are being followed along with the highest risk vulnerabilities being prioritized.  The VM leader will work directly with key leaders across these organizations to determine acceptable levels of risk to remediation and ensure these agreements are documents, measures and the informaiton shared across Sherwin.The VM leader should have the ability to understand and artiiculate the impact of vulnerabilites across the Sherwin ecosystem and be able to communicate this to multiple levels within the organization.

The ideal candidate will have a strong background in cybersecurity, project management, leadership skills, and a proactive approach to protecting our systems and data.

Reporting to this individual will be a cross functional team of full-time employees and coops.  The team makeup currently includes 3 FTE with additional Coops.

ESSENTIAL FUNCTIONS:

• Team Leadership: Manage and lead a team of vulnerability and scanning analysts as well as reporting capabilities. 
• Provide mentorship, set employee objectives, monitor and evaluate performance, provide feedback and ensure professional growth and development.
• Vulnerability Assessment: Oversee the regular scanning and analysis of the company’s networks, applications, and systems to identify vulnerabilities.
• Risk Evaluation: Prioritize vulnerabilities based on risk and develop strategic plans for mitigation or remediation.
• Develop dashboards and actionable steps to enable asset owners to develop remediation strategies and reduce the attack surface.
• Patch Management: Collaborate with IT and development teams to ensure timely patching of vulnerabilities.
• Partner with asset owners and stakeholders across the organization to drive vulnerability remediation 
• Educate teams on best practices for vulnerability management and remediation
• Compliance and Reporting: Ensure compliance with relevant security regulations and standards. Prepare and present regular vulnerability exposure reports to senior management.
• Incident Response: Support incident response teams in the event of a security breach or other incidents.
• Policy Development: Develop and refine vulnerability management policies and procedures to enhance the organization's security posture.
• Stakeholder Communication: Act as a key point of contact for vulnerability management issues within the organization. Communicate effectively with other managers and stakeholders to align security measures with business objectives.
• Technology Evaluation: Keep abreast of new security technologies and integrate innovative tools and technologies to enhance vulnerability management capabilities.
• Budget Management: Manage the budget for the vulnerability management team, including tools, technologies, and training.

This position is not eligible for sponsorship for work authorization now or in the future, including conversion to H1-B visa.

This position has a hybrid work schedule with three days in the office and the option for working remotely two days.

FORMAL EDUCATION:

Required:

• Bachelor’s Degree (or foreign equivalent) or in lieu of a degree, at least 12 years in experience in the field of Information Technology or Business (work experience or a combination of education and work experience in the field of Information Technology or Business)

Required:

• 12+ years of experience in IT or cybersecurity
• 6+ years of leading and managing a team of direct reports
• Proven leadership experience with the ability to manage and develop a team.
• Understanding of network security protocols, cryptography, and application security.
• Understanding of security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Technical infrastructure knowledge (i.e. Windows OS, Linux, contain