Newrez LLC ยท 3 weeks ago
Senior Director Vulnerability Management
TX, Coppell
Full-time
Hybrid
Senior Level, Lead/Staff
10+ years expNewrez LLC is a company focused on providing superior service to residential mortgage borrowers and business partners. They are seeking a Senior Director of Vulnerability Management who will own the enterprise VM program, establish governance, and drive risk-based prioritization while collaborating with various teams to enhance security measures.
FinanceFinancial Services
Responsibilities
Define and continuously mature a risk-driven VM strategy, roadmap, and RACI
Establish policy-aligned remediation SLAs, exception criteria, escalation paths, and evidence requirements
Ensure customer/contract obligations related to scanning cadence and patch timelines are operationalized where applicable
Lead enterprise scanning and assessment coverage across on-prem, cloud, containers, and applications using core platforms (e.g., Qualys VMDR/TotalAppSec, Veracode, Microsoft Defender for Endpoint)
Expand and maintain authenticated/agent-based coverage; manage discovery for shadow/EOL assets
Oversee web app/API scanning in partnership with AppSec; ensure rescans validate remediation
Lead enterprise hardening efforts across systems, software, networks, cloud applications, and cloud environments
Drive CMDB and ITSM integrations to automate ownership mapping, ticket creation, routing, and SLA tracking
Improve data quality (asset/owner criticality) to enable risk-based prioritization and reporting
Partner with Infra, Desktop, Cloud, and App Owners to remove blockers (e.g., maintenance windows, change control constraints, EOL/EOS platforms)
Track and resolve exceptions with compensating controls; publish actionable playbooks/runbooks
Orchestrate assessment, prioritization, patch/mitigation guidance, rescans, stakeholder communications, and executive updates for critical vulnerabilities
Produce executive-ready dashboards (coverage, SLA attainment, risk burn-down, exception inventory, business impact)
Maintain audit artifacts and evidence for internal/external assessments; support GLBA and customer reviews
Qualification
Required
Bachelor's degree in Information Security, Information Systems, Computer Science, or equivalent experience
10+ years in Information Security with 5+ years leading Vulnerability Management for a multi-platform enterprise (hybrid cloud). Demonstrated results improving enterprise VM metrics and SLA performance
Technical: Depth with Qualys (VMDR, WAS/TotalAppSec), Veracode, Microsoft Defender for Endpoint; familiarity with network device scanning, container registries, and cloud workload coverage
Frameworks/Regulatory: Working knowledge of NIST CSF/ISO 27001; audit evidence management (e.g., GLBA); experience satisfying customer security requirements
Ability to effectively and accurately convey information to others
Leadership & Influence: Leads cross-functional remediation at enterprise scale; strong executive presence and communication
Risk-Based Decisioning: Translates technical findings to business risk; prioritizes by asset criticality and exposure
Tooling Expertise: Hands-on with Qualys (VMDR and WAS/TotalAppSec), Veracode, Microsoft Defender for Endpoint; data/automation integrations with CMDB/ITSM
Process Design: Scalable workflows, exception governance, and evidence management aligned to standards and audits
Partnering & Change Management: Drives outcomes with Infra/App/Cloud teams and third parties; removes operational friction
Communication: Converts complex risk and technical data into concise, outcome-oriented narratives for executives and non-security stakeholders
Preferred
Preferred Certifications: CISSP, CISM, CCSP, or comparable
Benefits
Medical, dental, and vision insurance
Health Savings Account with employer contribution
401(k) Retirement plan with employer match
Paid Maternity Leave/Parental Bonding Leave
Pet insurance
Adoption Assistance
Tuition reimbursement
Employee Loan Program
The Newrez Employee Emergency and Disaster Fund is a new program to support our team members
1 Volunteer Time Off (VTO) day, company-paid volunteer day where all eligible employees may participate in a volunteer event with a nonprofit of their choice
Employee Matching Gifts Program: We will match monetary employee donations to eligible non-profit organizations, dollar-for-dollar, up to $1,000 per employee
Newrez Grants Program: Newrez hosts a giving portal where we provide employees an abundance of resources to search for an opportunity to donate their time or monetary contributions
Company
Newrez LLC
Newrez brings a unique combination of mortgage expertise, financial strength, and product innovation capabilities to the lending table.
5001-10000 employees
H1B Sponsorship
Newrez LLC has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (31)
2024 (12)
2023 (41)
2022 (3)
2021 (2)
2020 (6)
Funding
Current Stage
Late StageLeadership Team
Joshua Bishop
Chief Operating Officer, Servicing
B
Bruce Williams
Vice Chairman
Recent News
2026-01-08
2025-11-01
Company data provided by crunchbase