Vulnerability Manager

🕒 August 10

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Guild Mortgage

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1960

🏗️ Construction

💸 Finance

🏠 Real Estate

Construction • Finance • Real Estate

Guild Mortgage is a U. S. -based mortgage lender and loan servicer that provides a wide range of home financing products and services to consumers and business partners. The company offers purchase and refinance mortgages, including conventional, FHA, VA, USDA, jumbo, renovation, construction, reverse mortgages, HELOCs, and specialty programs and down-payment assistance. Guild Mortgage operates nationwide through local branches and loan officers, supports borrowers with servicing and online account management, and partners with builders, real estate agents, title agents, and correspondents.

📋 Description

• Develop, implement, and continuously improve the enterprise vulnerability management program • Establish and maintain vulnerability management policies, standards, procedures, and governance processes • Define risk-based remediation priorities based on asset criticality, exploitability, threat intelligence, and business impact • Lead vulnerability review meetings and remediation governance forums • Develop vulnerability management roadmaps and maturity improvement initiatives • Oversee vulnerability scanning across servers, workstations, network devices, cloud platforms, containers, applications, and databases • Validate and triage identified vulnerabilities to reduce false positives • Assess vulnerability severity using CVSS, threat intelligence, exploit availability, and environmental factors • Monitor emerging threats, zero-day vulnerabilities, and security advisories • Coordinate remediation with IT Operations, Infrastructure, Engineering, Cloud, and Development teams • Establish remediation timelines and service-level objectives • Track remediation progress against established metrics • Manage exception processes and risk acceptance workflows • Escalate critical vulnerabilities and overdue remediation items to leadership • Manage vulnerability scanning and management platforms including Tenable, Microsoft Defender Vulnerability Management, and Wiz • Ensure scanning coverage, tuning, maintenance, and integration effectiveness • Develop executive dashboards and operational reporting • Report vulnerability trends, remediation effectiveness, and exposure reduction progress • Track and report KPIs and KRIs • Support enterprise risk management initiatives • Evaluate vulnerabilities in the context of business risk • Facilitate risk-based decisions regarding remediation versus risk acceptance • Align vulnerability management activities with regulatory and security frameworks • Incorporate internal and external threat intelligence into vulnerability prioritization • Monitor the CISA Known Exploited Vulnerabilities catalog and other threat intelligence sources • Prioritize remediation based on active exploitation trends • Mentor and guide less experienced professional contributor staff • Work cross-functionally to solve complex organizational problems and implement changes

🎯 Requirements

• Bachelor's Degree directly related to the position or equivalent, preferred • Minimum five years experience • Minimum three years supervisory or leadership experience • Ability to organize and manage multiple priorities simultaneously • Ability to work independently or within a team • Excellent interpersonal communication skills • Ability to handle confidential matters with discretion • Excellent verbal and written communication skills • Highly organized and detail-oriented • Ability to work in a fast-paced, metrics-driven environment • Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications • Ability to adhere to process protocol and apply established protocols in a timely manner • Ability to operate standard office equipment and keyboards • Ability to accurately interpret sounds and associated meanings at interpersonal conversation volume • Travel 5% or less • Commitment to company values

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • AD&D insurance • LTD insurance • 401(k) with employer match • Pleasant work environment • Competitive compensation