49 applicants

Company

Trane Deutschland GmbH · 2 days ago

Senior Manager, Vulnerability Management

Davidson, NC

Full-time

Remote

Senior Level, Lead/Staff

$160K/yr - $220K/yr

7+ years exp

Maximize your interview chances

Industrial Machinery Manufacturing

Insider Connection @Trane Deutschland GmbH

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Oversee, mature, and provide strategic direction for the vulnerability management program.

Direct and/or perform on-going vulnerability assessments, penetration tests, and application and network security scans.

Communicate vulnerability results in a manner understood by technical and non-technical business units. based on risk tolerance and threat to the business, and gain support through influential messaging.

Drive remediation of vulnerabilities, while collaborating with and assisting system owners with prioritization and providing guidance on adequate remediation/risk reduction actions.

Work closely with developers on remediation of application vulnerabilities.

Track and report on critical vulnerability status and impact, including triage, remediation, documentation, and escalation.

Maintain and regularly update documentation of the company’s external attack surface.

Monitor the company’s attack surface and external threat intelligence for applicable critical/zero day vulnerabilities, and triage through process as appropriate.

Serve as a subject matter expert on emerging threats and vulnerabilities.

Maintain governance over documentation, including management and updates of relevant policies, procedures, standards, and similar, making updates to stay aligned with evolving requirements and threats.

Report metrics and scorecards to measure effectiveness and efficiency of vulnerability management program.

Mentor, coach, and develop key talent within the team.

Assist with management of departmental budget and vendor relationships, including conducting quarterly business reviews, capturing metrics, and reporting on KPIs to drive program improvements.

Serve as a key cybersecurity SME to advise other IT and cybersecurity team members; as well as our third parties, key partners, and acquired entities.

Work closely with the Director, Security Operations, on strategic direction and continuous improvement of the function, including capability and maturity assessments and long-range planning, as well as evaluation of current and future-state toolsets and partnerships.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Vulnerability ManagementPenetration TestingApplication SecurityCybersecurity ConceptsCISSP CertificationCISA CertificationCISM CertificationSANS CertificationRisk AssessmentThreat IntelligenceProject Management

Required

Bachelor’s degree in a related field and/or a minimum of 7-10 years of equivalent experience in cybersecurity

At least 3 years in vulnerability management, penetration testing, or other related expertise.

Solid technical understanding of cybersecurity concepts, frameworks, standards, guidelines, and principles.

Ability to handle time-sensitive situations with a calm and serious attitude while maintaining an appropriate sense of urgency.

Ability to keep abreast of current vulnerabilities and communicate impact, assist with prioritization, and drive appropriate remediation actions to stakeholders.

Ability to communicate and present at various levels of technical detail depending on audience, ranging from cybersecurity deep dives to non-technical stakeholders.

Effective project management and organizational skills, including managing multiple, concurrent tasks and meeting deadlines.

Excellent interpersonal skills and ability to create collaborative relationships with colleagues across various groups and levels, and influence without authority.

Demonstrated leadership skills with ability to communicate effectively and work independently, both as part of and leading a team.