Director, Enterprise Vulnerability & Exposure Management

Stellenbeschreibung:

Operationalize and drive Danaher’s global vulnerability and exposure management (CTEM) program
Shape and refine enterprise vulnerability and exposure management strategy
Build a sustainable capability covering governance, risk-based prioritization, validation, metrics, and executive reporting
Mobilize remediation owners across infrastructure, cloud, application, and third-party teams
Architect the CTEM operating model covering scope, discovery, prioritization, validation, and remediation mobilization across the enterprise attack surface
Design prioritization logic combining asset criticality, exploitability, exposure path, controls, and business impact beyond raw CVSS
Set the integration blueprint across vulnerability management, attack surface management, cloud posture, red team/offensive testing, and remediation/ticketing tools
Design the sustainability and governance model, including remediation SLAs, exception governance, service ownership, and metrics framework
Report to the Danaher Global Chief Information Security Officer

Requirements

14+ years of cybersecurity experience with a focus on vulnerability, exposure, or threat exposure management (GCRF P5 Bachelor’s-track minimum; recommended, pending Comp sign-off)
Experience leading enterprise or global vulnerability/exposure management or CTEM strategy, governance, and remediation across multiple business units
Experience with enterprise vulnerability/exposure platforms such as Tenable, Qualys, Rapid7, Wiz, or Defender
Risk-based prioritization using threat intelligence and asset context
Experience working independently to mobilize remediation across infrastructure, cloud, application, and third-party owners
Experience reporting exposure risk to executive stakeholders
Experience integrating VM with attack surface management and cloud security posture is a plus
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field is a plus
CISSP, CISM, or CRISC is a plus

Core Competencies

Demonstrates extensive expertise in driving global vulnerability and exposure management strategies, with a strong focus on governance, risk-based prioritization, and executive reporting. Proficient in mobilizing remediation efforts across diverse teams and integrating various security management tools.