Dun & Bradstreet unlocks the power of data through analytics creating a better tomorrow. Each day we are finding new ways to strengthen our awardwinning culture and accelerate creativity innovation and growth. Our 6000 global team members are passionate about what we do. We are dedicated to helping clients turn uncertainty into confidence risk into opportunity and potential into prosperity. Bold and diverse thinkers are always welcome. Come join us! Learn more at dnb/careers.
The Senior Director of Vulnerability Management is responsible for leading and evolving the global vulnerability management program for Dun & Bradstreet; a global data analytics and insights company. This role requires a strategic leader with deep expertise in vulnerability identification risk assessment remediation prioritization and collaboration across security IT and business teams. The Senior Director will drive continuous improvement in the organizations security posture by developing and executing a comprehensive threat informed riskbased vulnerability management strategy aligned with industry best practices and regulatory requirements.
This individual will oversee vulnerability detection reporting and remediation efforts across a complex IT and cloud infrastructure ensuring alignment with the organizations broader cybersecurity risk and compliance objectives. The ideal candidate has extensive experience in vulnerability management security operations and leadership within large complex environments.
Key Responsibilities:
Define implement and continuously enhance the global vulnerability management strategy ensuring it aligns with the organizations security risk and compliance frameworks. Establish policies processes and best practices to proactively identify assess and mitigate vulnerabilities across cloud onpremises and hybrid environments.
Develop a risk and threatbased approach to vulnerability prioritization considering exploitability business impact and regulatory requirements. Partner with Cyber Threat Intelligence (CTI) teams to incorporate realworld threat data into vulnerability assessments and remediation efforts.
Partner with IT DevOps engineering and business leaders to drive timely and effective remediation of critical vulnerabilities. Communicate risk and remediation requirements to executive leadership ensuring alignment with business objectives.
Develop and maintain key performance indicators (KPIs) and executive dashboards to track vulnerability management effectiveness. Provide regular updates to senior leadership and committees on vulnerability trends remediation progress and risk reduction efforts.
Oversee the selection deployment and optimization of vulnerability scanning tools attack surface management solutions and security orchestration platforms. Drive automation initiatives to improve vulnerability detection prioritization and remediation processes.
Ensure the vulnerability management program meets or exceeds compliance requirements including NIST CIS ISO 27001 PCIDSS and other relevant regulatory frameworks. Support audit and regulatory inquiries by providing clear documentation and evidence of vulnerability management controls.
Build and lead a highperforming vulnerability management team fostering a culture of accountability innovation and continuous improvement. Mentor and develop talent ensuring the team has the necessary skills and expertise to address evolving cybersecurity challenges.
Key Requirements:
12 years of experience in cybersecurity or technology with at least 5 years in a leadership role overseeing vulnerability management security operations or risk management in a large global organization.
Deep understanding of vulnerability management tools (e.g. Tenable Qualys Rapid7 Microsoft Defender etc. attack surface management and threat intelligence integration. Experience with cloud security (AWS Azure GCP) container security and DevSecOps practices.
Strong familiarity with riskbased vulnerability prioritization CVSS scoring and frameworks such as NIST CIS ISO 27001 PCIDSS and MITRE ATT&CK. Experience working with regulatory compliance requirements and audit processes.
Proven ability to lead and develop highperforming security teams across multiple geographies. Strong executive presence with the ability to communicate complex security risks to Clevel executives and board members.
A Bachelor or Masters degree in Cybersecurity Information Security or Business Administration (MBA) is preferred. Industry certifications preferred.
Benefits We Offer
Generous paid time off in your first year increasing with tenure.
Up to 16 weeks 100 paid parental leaveafter one year of employment.
Paid sick timeto care for yourselfor family members.
Education assistanceand extensive training resources.
Do GoodProgram: Paid volunteer days&donation matching.
Competitive401k with company matching.
Health & wellness benefits including discounted Wellhubmembership rates.
Medical dental&vision insurancefor youspouse/partner&dependents.
Notice to Applicants: Please be advised that this job posting page is hosted and powered by Lever. Your use of this page is subject to Levers Privacy Notice and Cookie Policy which governs the processing of visitor data on this platform.
Equal Employment Opportunity (EEO: Dun & Bradstreet provides equal employment opportunities to applicants and employees without regard to race color religion creed sex age national origin citizenship status disability status sexual orientation gender identity or expression pregnancy genetic information protected military and veteran status ancestry marital status medical condition (cancer and genetic characteristics) or any other characteristic protected by law. Know Your Rights: Workplace Discrimination is Illegal The current poster can be foundhere. We participate in EVerify The current poster can be found here.
Accommodations information for applicants with disabilities: Dun & Bradstreet is committed to providing reasonable accommodation to among others individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with Dun & Bradstreet please send an email to to let us know the nature of your accommodation request and your contact information.
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.