Vulnerability Program Manager

🕒 August 21

🇺🇸 United States – Remote

💵 $75k - $100k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

📋 Program Manager

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NetCov

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔒 Cybersecurity

🤝 B2B

💼 Consulting

💰 Private equity on 2022-11

Cybersecurity • B2B • Consulting

NetCov is a 30-year managed IT and technology services firm that delivers managed IT, cloud, cybersecurity, compliance, and AI-driven advisory services to business and mission-focused organizations. The company emphasizes people-first managed services, proactive cybersecurity (including CMMC/NIST alignment for Department of Defense contractors), cloud migrations and optimization, compliance management, and strategic IT advisory and AI integration. NetCov supports industry verticals such as AEC (architecture, engineering & construction), credit unions, finance/PE-backed companies, nonprofits/NGOs, and DoD contractors; it cites partnerships with AWS and Microsoft, has 350+ team members, and supports 50,000+ users.

📋 Description

• Own the end-to-end vulnerability management and patching program across asset discovery, scanning, prioritization, remediation tracking, verification, and reporting • Define and document scan frequency, patch cadence, remediation targets, exception handling, and emergency out-of-band work criteria • Establish and maintain program RACI across Vulnerability Analysts, security engineering, service desk, and clients • Define HaloPSA ticket types, templates, and workflows for consistent work and evidence capture • Run recurring vulnerability management reviews for assigned clients and maintain prioritized remediation backlogs • Coordinate remediation across NetCov delivery teams and client staff around change windows and maintenance periods • Manage exclusions, suppressions, and risk acceptances with documented reasons, owners, and review dates • Serve as escalation point for zero-day and actively exploited vulnerabilities requiring out-of-cycle patching • Own client-facing reports, aging and trend analysis, and executive summaries • Present program status to client stakeholders and translate scan output into risk, progress, and required client actions • Support client audit and compliance evidence requests • Partner with Client Success and account teams during onboarding, escalations, and renewals • Own vulnerability tooling configuration and health, scanner coverage, credentialed scanning, agent deployment, and asset inventory accuracy • Integrate scanning, ticketing, and patching platforms with security engineering • Drive data-quality improvements and automation opportunities • Define and report program metrics including SLA attainment, vulnerability aging, patch compliance, scan coverage, and recurring findings • Train and mentor Vulnerability Analysts and delivery staff • Contribute to vulnerability management service offerings • Perform other duties as assigned

🎯 Requirements

• Demonstrated experience running vulnerability management and patching in a multi-client or multi-environment setting, ideally at an MSP or MSSP • Hands-on proficiency with vulnerability management and patching platforms such as InsightVM, ConnectSecure, NinjaOne, Datto RMM, or equivalent • Working knowledge of PSA and workflow tooling; HaloPSA preferred, including ticket design and reporting • Practical understanding of risk-based prioritization, including CVSS, exploit intelligence, and business context • Familiarity with CMMC, PCI DSS, SOC 2, HIPAA, and NCUA examination expectations • Strong written and verbal communication skills, with experience running client meetings and presenting technical findings to non-technical stakeholders • Ability to drive work across teams without direct authority • Relevant certifications such as Security+, GIAC, CISSP, or vendor-specific credentials are preferred but not required • Full-time, exempt position • Occasional travel required

🏖️ Benefits

• Professional growth and hands-on exposure to enterprise-level project execution • Supportive, people-first collaborative culture • Standard business hours with flexibility around month-end close • Occasional travel for client engagement, team integration, and offsites