Director, Enterprise Vulnerability & Exposure Management

This is a fully remote position, open to applicants in Portugal, +1 more country.

📋 Description

• Design the operating model for CTEM across the entire enterprise attack surface.

• Define and outline the processes for discovery, prioritization, validation, and mobilization of remediation efforts.

• Develop prioritization criteria based on asset criticality, exploitability, pathways of exposure, existing controls, and business impact.

• Establish the integration framework for vulnerability management, attack surface management, cloud posture, red team/offensive testing, and remediation/ticketing tools.

• Create a sustainability and governance framework, which includes remediation SLAs, governance of exceptions, service ownership, and performance metrics.

• Engage remediation owners across infrastructure, cloud, applications, and third-party environments.

• Provide exposure risk reports to executive stakeholders.

• Implement and lead Danaher’s global program for vulnerability and exposure management.

⛳️ Requirements

• Over 14 years of experience in cybersecurity, specifically focusing on vulnerability, exposure, or threat exposure management.

• Proven experience in leading enterprise or global strategies for vulnerability/exposure management or CTEM, governance, and remediation across various business units.

• Familiarity with enterprise vulnerability/exposure management platforms such as Tenable, Qualys, Rapid7, Wiz, or Defender.

• Experience in risk-based prioritization leveraging threat intelligence and asset context.

• Ability to mobilize remediation efforts independently across infrastructure, cloud, applications, and third-party stakeholders.

• Experience in reporting exposure risks to executive stakeholders.

• A Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field is advantageous.

• Knowledge of integrating vulnerability management with attack surface management and cloud security posture is a plus.

• Professional certifications such as CISSP, CISM, or CRISC are preferred.

🏝️ Benefits

• Comprehensive and competitive benefits packages.

• Health care programs.

• Paid time off.