Senior Director – Security Posture & Exposure Management

🔥 7 minutes ago

🇺🇸 United States – Remote

💵 $159k - $257.4k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Eli Lilly and Company

WebsiteLinkedInAll Job Openings

10,000+ employees

💊 Pharmaceuticals

🏥 Healthcare

🧬 Biotechnology

💰 $6.5M Post-IPO Debt - Eli Lilly on 2024-02

Pharmaceuticals • Healthcare • Biotechnology

Eli Lilly and Company is a global pharmaceutical company that researches, develops, manufactures, and distributes prescription medicines and provides patient support services. The company focuses on life-changing medicines across conditions such as diabetes, cancer, Alzheimer’s disease, autoimmune disorders, dermatology, migraine, obesity, and sleep apnea; it runs clinical trials, offers LillyDirect pharmacy services, and emphasizes manufacturing quality, medication safety, and research into genetic medicines. Eli Lilly also provides patient resources, condition education, and access programs to help people find care and participate in trials.

📋 Description

• Set and own the technical strategy, architecture, operating model, roadmap, and outcomes for end-to-end enterprise vulnerability management • Lead, develop, and hold accountable leaders and teams across vulnerability management, application security, offensive security, advanced discovery, validation and prioritization, and exposure reporting • Own the technical direction of the enterprise scanning estate, including coverage architecture, scan health, authenticated and agent-based scanning, asset reconciliation, tooling selection, and integrations • Serve as the senior technical escalation point for disputed findings, severity, exploitability, false positives, and exceptions • Establish risk-based prioritization standards using severity, exploitability, threat intelligence, asset criticality, and exposure context • Define and enforce remediation SLAs, exception and escalation paths, and accountability models • Oversee the application security program and integrate its findings into enterprise prioritization, SLAs, and burndown reporting • Oversee offensive security and advanced vulnerability discovery, including scope, rules of engagement, and systemic remediation • Own exposure reporting and burndown, including executive reporting, technology-owner scorecards, trend analysis, data pipelines, and metrics • Document mitigations and manage risk acceptance where residual exposure cannot be eliminated • Partner with Security Operations, Incident Response, and threat intelligence on actively exploited weaknesses • Manage budget, vendor relationships, headcount, contract resources, and offshore resources

🎯 Requirements

• High School Diploma with 4+ years of experience in Cyber Security, Information Technology, or a related field • 10+ years of hands-on professional experience in cybersecurity, primarily in vulnerability management, security operations, or offensive security • 5+ years leading a security function • 3+ years managing people leaders • Hands-on vulnerability management experience across hybrid cloud and on-premises environments • Experience leading a vulnerability management or security operations organization at enterprise scale, including leading other people leaders • Familiarity with application security practices, including SAST/DAST, software composition, and secure development • Ability to build risk-based prioritization trusted by technology teams • Experience establishing remediation SLAs and accountability models • Working knowledge of offensive security and red team practice • Experience designing or re-architecting security tooling, automation, and data pipelines • Strong data and metrics skills • Excellent communication and influence skills • Bachelor’s Degree in Cyber Security, Computer Science, or Information Technology preferred • OT or regulated lab experience is a plus

🏖️ Benefits

• Company bonus depending partly on company and individual performance • Company-sponsored 401(k) • Pension • Vacation benefits • Medical, dental, vision, and prescription drug benefits • Healthcare and/or dependent day care flexible spending accounts • Life insurance and death benefits • Time off and leave of absence benefits • Employee assistance program • Fitness benefits • Employee clubs and activities