Manager, Vulnerability Management (Cybersecurity)

Location: U.S. Remote; the role is based in the US and fully remote.

Salary: $175K–$200K annually, plus equity and bonus.

Company

hirify.global provides an identity security platform for controlling and auditing privileged access across on-premises, multi-cloud, and ephemeral infrastructure.

What you will do

• Design and execute the Product Vulnerability Management target operating model across people, processes, and technology.
• Lead the Product Vulnerability Management team, including culture, recruiting support, technical screening, and team development.
• Partner with Product Security, Product Development, IT, operations, and cybersecurity teams to integrate security and enable developer enablement.
• Manage product security scanning tools, including SAST, SCA, DAST, and CSPM, and oversee vulnerability disclosure and customer or researcher inquiries.
• Plan and allocate resources for vulnerability management initiatives while ensuring delivery within scope, schedule, and budget.
• Report program metrics and effectiveness to executives, stakeholders, auditors, customers, and external stakeholders.

Requirements

• 8+ years of relevant experience in Product, Application, and Vulnerability Management, including preferred 3 years of Product Security or Vulnerability Management leadership experience.
• Experience establishing and leading a Vulnerability Management program.
• Current knowledge of the Product Security threat landscape and industry best practices.
• Bachelor’s degree in Computer Science, Information Security, Business Administration, or a related field; a master’s degree is preferred.
• Ability to balance business and security needs, explain and enforce security measures, influence stakeholders, prioritize competing demands, and meet deadlines.
• Strong leadership, communication, interpersonal, analytical, executive functioning, and presentation skills.
• Must already have U.S. work authorization; candidates requiring any type of U.S. work authorization now or in the future are not considered.
• Minimal travel of less than 10%.

Nice to have

• Understanding of cybersecurity frameworks, risk management principles, and standards including NIST, ISO 27001, CIS, GDPR, FedRAMP, and Common Criteria.
• Cybersecurity certifications such as CISSP, CISM, CSSLP, CCSP, or similar.
• Familiarity with Jira and Confluence.
• Background in software development.
• Master’s degree.

Culture & Benefits

• Remote work with a collaborative, innovative, and self-motivated environment.
• Work focused on protecting human and machine identities for large organizations.
• Competitive salary, meaningful bonus program, equity, healthcare insurance, pension or retirement matching, life insurance, employee assistance program, paid time off, and company holidays.
• Employment is subject to background, education, and employment verification; publicly posted social media may also be reviewed.