Sr. Manager, Vulnerability & Threat Management

Requisition Number: 66180

 

Corning is vital to progress – in the industries we help shape and in the world we share.

 

We invent life-changing technologies using materials science. Our scientific and manufacturing expertise, boundless curiosity, and commitment to purposeful invention place us at the center of the way the world interacts, works, learns, and lives.

 

Our sustained investment in research, development, and invention means we’re always ready to solve the toughest challenges alongside our customers. 

 

The global Information Technology (IT) Function is leading efforts to align IT and Business Strategy, leverage IT investments, and optimize end to end business processes and associated information integration technologies.  Through these efforts, IT helps to improve the competitive position of Corning's businesses through IT enabled processes.  IT also delivers Information Technology applications, infrastructure, and project services in a cost efficient manner to Corning worldwide.

Role Purpose

Corning has an immediate opening for a motivated Threat & Vulnerability Management leader to join Corning's Global Cybersecurity Operations organization. Our goal is to stay ahead of and maintain a technical advantage over our adversaries by using the latest technical advancements by providing global capabilities that our Cyber Defenders rely on.  While the primary focus for this position is vulnerability identification and remediation, you will gain cross-functional experience as you interface directly with our cyber defenders to understand their mission and capabilities.  As a key part of this team, your responsibilities will include all aspects of the vulnerability management, including operation of the company’s vulnerability scanning solution prioritizing remediation efforts, communicating with leadership and system owners to drive remediation closure, and developing effective metrics. In this position, you will have opportunities to interact with both leadership and key stakeholders across the corporation and will be challenged with the opportunity for growth in a highly collaborative environment. 

This role has the ability to be virtual

Key Responsibilities

• Lead and coordinate the activities of the Threat & Vulnerability Management team, including but not limited to vulnerability identification, inventory, risk assessment and prioritization, continuous monitoring, remediation planning, and reporting.
• Optimize and enhance the vulnerability scanning capability.
• Improve and mature vulnerability reporting to key stakeholders and drive remediation efforts by communicating, clearly articulating, and prioritizing risk impact to all stakeholders to convey the urgency and need to remediate a vulnerability commensurate with the risk it presents.
• Deliver and enhance existing vulnerability and remediation metrics
• Develop the integration and automation strategy around multiple VM toolsets
• Perform risk-based technical assessments on technical vulnerabilities.
• Stay abreast of emerging threats and promote understanding of associated risk with stakeholders using a comprehensive communication strategy.
• Review and analyze vulnerability data to identify trends and patterns.
• Deliver vulnerability findings and drive remediation efforts.
• Advising employees responsible for remediation on the best reduction and remediation practices.
• Influence the development of vulnerability management standards and security policies.
• Oversee the vulnerability management processes, suggesting applicable change controls, and security exceptions.
• Design and implement new or enhanced vulnerability reporting and monitoring solutions.
• Assist and support incident response as needed

Skills Required

• Bachelor's degree in computer science or related field
• 5+ years of Vulnerability & Threat Management or related experience
• Able to evaluate trade-offs and come up with innovative ways to address vulnerabilities.
• Ability to think critically and find solutions to complex and often ambiguous s