Vulnerability Program Manager

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $75k - $100k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

📋 Program Manager

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NetCov

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

🔒 Cybersecurity

💰 Private equity on 2022-11

Consulting • Healthcare • Cybersecurity

NetCov is a managed IT and cybersecurity firm that delivers managed IT services, cloud solutions, compliance management, AI-driven advisory, and cybersecurity to businesses across industries. With about 30 years of experience, 350+ staff, and partnerships with providers like AWS and Microsoft, NetCov focuses on secure, scalable, people-first IT support, regulatory compliance (including CMMC/NIST readiness), and AI-enabled automation for organizations such as AEC firms, credit unions, defense contractors, private equity-backed companies, and nonprofits.

📋 Description

• Own the end-to-end vulnerability management and patching program, including asset discovery, scanning, prioritization, remediation tracking, verification, and reporting • Define and document scan frequency, patch cadence, remediation targets, exception handling, and emergency out-of-band work criteria • Establish and maintain program RACI across Vulnerability Analysts, security engineering, service desk, and clients • Define HaloPSA ticket types, templates, and workflows for patching, remediation, and scan evidence • Run recurring vulnerability management cadences and client review meetings • Maintain prioritized remediation backlogs and escalate stalled items • Coordinate remediation across NetCov delivery teams and client staff around change windows and maintenance periods • Manage exclusions, suppressions, and risk acceptances with documented reasons, owners, and review dates • Serve as escalation point for zero-day and actively exploited vulnerabilities requiring out-of-cycle patching • Own client-facing vulnerability reports, aging and trend analysis, and executive summaries • Present program status to client stakeholders and translate scan output into clear risk and progress updates • Manage client expectations regarding scope, timelines, and responsibilities • Support client audit and compliance evidence requests • Partner with Client Success and account teams during onboarding, escalations, and renewals • Own vulnerability-management tooling configuration, scanner coverage, credentialed scanning, agent deployment, and asset inventory accuracy • Integrate scanning, ticketing, and patching platforms with security engineering • Improve data quality by addressing stale assets, duplicate records, and unmanaged endpoints • Identify automation opportunities for reporting, ticket creation, and remediation validation • Define and report metrics including remediation SLA attainment, vulnerability aging, patch compliance, scan coverage, and recurring findings • Propose process and tooling changes to address systemic problems • Train and mentor Vulnerability Analysts and delivery staff • Contribute to the definition and packaging of NetCov vulnerability management services • Perform other duties as assigned

🎯 Requirements

• Demonstrated experience running vulnerability management and patching in a multi-client or multi-environment setting, ideally at an MSP or MSSP • Hands-on proficiency with vulnerability management and patching platforms such as InsightVM, ConnectSecure, NinjaOne, Datto RMM, or equivalent • Working knowledge of PSA and workflow tooling; HaloPSA preferred, including ticket design and reporting • Practical understanding of risk-based prioritization, including CVSS, exploit intelligence, and business context • Familiarity with CMMC, PCI DSS, SOC 2, HIPAA, and NCUA examination expectations • Strong written and verbal communication skills, with experience running client meetings and presenting technical findings to non-technical stakeholders • Ability to drive work across teams without direct authority • Relevant certifications such as Security+, GIAC, CISSP, or vendor-specific credentials preferred but not required • Full-time, exempt position • Standard business hours with flexibility around month-end close • Occasional travel required for client engagement, team integration, and offsites

🏖️ Benefits

• Professional growth and hands-on exposure to enterprise-level project execution • Supportive, people-first collaborative culture • Standard business hours with flexibility around month-end close • Occasional travel for client engagement, team integration, and offsites