ServiceNow Alliance Relationship Associate Director managing day - to - day aspects of the ServiceNow alliance relationship at EY. Collaborating with diverse teams to deliver customer value and transformational outcomes.
About the role
- Director of Vulnerability Management overseeing vulnerability management team to protect Fitch’s assets. Leading strategic initiatives in a hybrid work environment.
Responsibilities
- Define and execute the strategic roadmap the Unified Vulnerability Management program, including resource planning, performance tracking, and establishing and reporting on metrics (key performance indicators; key risk indicators; and objectives and key results) for the program.
- Lead the end-to-end vulnerability management lifecycle using a consistent, risk-based assessment methodology that evaluates likelihood, impact, control environment and Fitch specific business context, ensuring timely remediation and compliance with internal policies.
- Govern the intake, normalization, and triage of findings originating from tools and assessments to ensure alignment with a unified lifecycle management process.
- Manage vulnerabilities identified from scanning tools covering open source, custom source code, dynamic application scanning, static application scanning, infrastructure scanning, and cloud security posture management solutions. (SCA, SAST, DAST, infrastructure, and CSPM)
- Provide risk informed visibility to stakeholders through clear dashboards and other reporting mechanisms which indicate remediation expectations.
- Ensure proper reporting of vulnerabilities to stakeholders and drive remediation efforts from an Information Security perspective.
- Develop strong partnerships with engineering, application development, and infrastructure teams to ensure aligned remediation workflows and streamlined ticketing processes for opening and closing vulnerabilities.
- Maintain and track team workload, ensuring transparency and accountability.
- Collaborate with subject matter experts across InfoSec and Technology to contextualize findings, validate assessments, resolve ambiguity and accelerate closure without compromising risk posture.
- Own and operationalize Fitch’s cyber risk taxonomy, threat intelligence, compensating control analysis, and architectural context to ensure findings are prioritized appropriately.
- Perform contextual analyses for vulnerability risk prioritization based on the following criteria: the business criticality of systems to Fitch, cloud architecture details such as network segmentation and access controls, understanding of system and application architecture, and data confidentiality.
- Produce and maintain dashboards, metrics and trend analyses that facilitate consumption of risk information and enable responses to requests for executive reporting and audit requests.
- Deliver VM team projects on time and on budget, ensuring alignment with department goals, organizational goals, and regulatory requirements.
Requirements
- The ideal candidate will have 7-10 years of progressive leadership experience in Information Security, with at least 2 years in a dedicated Vulnerability Management role.
- They should demonstrate strong leadership skills, experience managing vulnerabilities across SAST, DAST, SCA, infrastructure, and CSPM solutions, and excellent communication and collaboration abilities for engaging technical teams and senior stakeholders.
- 7+ years of progressive security experience, with at least 3+ years assessing and managing vulnerability risks for multi-cloud enterprise systems.
- Experience applying industry frameworks and compliance standards (NIST, DORA) to apply risk classifications during the vulnerability lifecycle management process.
- Experience producing contextual analysis for vulnerability risk prioritization based on: the business criticality of systems, cloud architecture details such as network segmentation and access controls, understanding of system and application architecture, and data confidentiality.
- Experience coordinating management of multiple vulnerability scanning tools and managing vulnerabilities identified from scanning tools covering open source, custom source code, dynamic application scanning, static application scanning, infrastructure scanning, and cloud security posture management solutions. (SCA, SAST, DAST, infrastructure, and CSPM)
- Experience managing remediation lifecycles through enterprise ticketing systems for vulnerability tracking and workflow automation.
- Proven ability to create executive-level dashboards and reports for vulnerability metrics.
- Excellent communication and collaboration skills for engaging technical teams and senior stakeholders.
- Leadership and team management skills, including resource planning, OKR setting, and performance reviews.
- Strong problem-solving skills and ability to make risk-based decisions while managing multiple projects simultaneously.
- Experience leveraging or guiding the work to use AI-powered security tools or platforms to improve vulnerability detection and remediation workflows.
Benefits
- Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location
- A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity
- Investing in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long-term goals
- Promoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind
- Supportive Parenting Policies: Family-first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively
- Dedication to Giving Back: Paid volunteer days and support for community engagement initiatives
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Director of Construction overseeing activities for new and existing plant construction at Comcast. Responsible for budget management, stakeholder relations, and project management across multiple locations.
Director of Audience Strategy leading Xumo Identity Platform integration. Driving audience insights and targeting for marketing and sales effectiveness.
Director of Creative Design leading visual identity and brand storytelling for a high - growth baby tech company. Overseeing design strategy and creative execution while mentoring a talented team.
Overseeing drug safety profile and risk management for clinical products at BridgeBio Pharma. Collaborating with teams for regulatory submissions and safety evaluations in a remote role.
Director of Development at Hunger Free America to enact public policies aimed at ending U.S. hunger. Overseeing fundraising efforts and managing donor relations for a nonprofit organization.
Director of Enterprise Systems at Chicago Public Media leading technology platforms for audience engagement and revenue growth. Managing systems architecture and strategy to reduce silos and ensure robust infrastructure.
Director of State & Strategic Accounts responsible for expanding access to naloxone portfolio. Engaging with state departments and organizations to advance public health efforts in opioid crisis.
Managing Director leading enterprise organizational development and change initiatives at Cigna. Partnering with senior leaders to drive effectiveness, high performance, and change adoption across the organization.
Leading Quality Control operations for biopharmaceutical company Kyverna Therapeutics. Overseeing compliance and strategic leadership in cell therapy development and commercialization.