{"id":4148843,"url":"https://alion.io/job/dxc-technology-director-information-security","title":"Director Information Security","company":{"id":88,"name":"DXC Technology","domain":"dxc.com","url":"https://alion.io/company/dxc-technology","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":213,"ghost_share":0.005,"stale_share":0.859,"repost_share":0.028,"time_to_fill_p50_days":29,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":167000,"max":346800,"currency":"USD","period":"year","gross":null,"usd_annual":346800},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Claude","optional":false}],"status":"live","first_seen_at":"2026-11-10T00:00:00Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-12T08:23:15Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Job Description:\nDXC’s Global Cyber Security team is building a more mature, comprehensive approach to cyber risk management and a risk-aware culture across the company. The goal is a clearer view of risk across our technology landscape, so we can better protect it and direct our risk mitigation investments where they matter most.\nWe are looking for an experienced Vulnerability Management Lead to own and run the enterprise vulnerability management lifecycle. You will be responsible for finding, prioritizing, driving the remediation of, and reporting on security vulnerabilities across DXC’s global infrastructure and applications, and you will make sure this work happens on time and at scale.\nIf you have a track record of leading vulnerability programs in large, complex environments and can turn scanning data into clear decisions for both technical teams and leadership, we’d like to hear from you\nVulnerability Management Lead: Key Responsibilities (AI-Scale Identification and Remediation)\nAI-driven identification at scale\nLead the adoption and operation of AI-enabled vulnerability discovery tools, including frontier models such as Claude Mythos-class systems, to find and triage vulnerabilities across code, infrastructure, and applications at a pace traditional scanning cannot match.\nDefine how AI-generated findings are validated, deduplicated, and turned into actionable tickets, so that increased discovery volume leads to better decisions rather than alert fatigue.\nCoordinate with partner programs and trusted access arrangements where advanced models are available only to vetted organizations, and maintain the internal readiness to use them when access is granted.\nPrioritization for compressed exploit timelines\nBuild prioritization workflows that account for faster weaponization, combining AI-assessed exploitability, threat intelligence, known exploited vulnerability feeds, asset criticality, and exposure.\nSet and enforce accelerated remediation targets for vulnerabilities likely to be exploited quickly, and define when emergency change processes should be triggered.\nMonitor for AI-assisted exploit development and mass-exploitation campaigns, and direct rapid response when a vulnerability class is being weaponized across the industry.\nRemediation at scale\nDesign automated remediation pipelines where safe, including automated patch deployment, configuration fixes, pull requests for code-level issues, and infrastructure-as-code corrections, with human approval gates for high-risk changes.\nDrive remediation with asset and application owners, and provide them with AI-assisted fix guidance while requiring verification that the fix is correct and does not introduce regressions.\nVerify remediation through automated rescanning and retesting, and track closure quality, not only closure counts.\nProgram governance and risk acceptance\nGovern exceptions and risk acceptances with clear criteria, time limits, and senior sign-off, including cases where AI tooling identifies issues with no available fix.\nEnsure that AI-driven discovery is coordinated with responsible disclosure obligations and vendor notification processes.\nMaintain audit-ready evidence of discovery coverage, prioritization decisions, and remediation outcomes for customers, regulators, and internal governance bodies.\nReporting and metrics\nReport on vulnerability posture, backlog, mean time to remediate, time-to-exploit exposure, and automation coverage, tailored for technical teams, executives, and the board.\nMeasure the program’s effectiveness at scale, including the percentage of findings resolved automatically, false-positive rates from AI tools, and the reduction in exposure window for high-risk issues.\nSecuring AI systems themselves\nExtend the vulnerability management program to cover AI systems, models, agents, and their supporting infrastructure, including prompt injection, data poisoning, model supply chain, and insecure tool integrations.\nTeam, tooling, and stakeholders\nLead and develop a team that combines vulnerability management expertise with AI, automation, and software engineering skills.\nSelect and integrate tooling across scanning, AI analysis, ticketing, and orchestration platforms, and manage vendor relationships and budgets.\nPartner with IT operations, cloud, application development, security operations, and business leaders to embed remediation into delivery, and build a risk-aware culture across the company.\nCompensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $167,000 - $346,800.Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.\nAt DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.\nIf you are an applicant from the United States, Guam, or Puerto Rico\nDXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.\nWe participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for theFederal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.\nPostings Link\nDisability Accommodations\nIf you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us viaemail.\nPlease note: DXC will respond only to requests for accommodations due to a disability.\nRecruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.","description_format":"text","description_chars":7391,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Spanish","level":"All levels","optional":false}]},"benefits":["Insurance coverage","Retirement plans","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Managed IT Services (MSP)","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-12T08:23:15Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 61 · green card filings: 13","filings_12m":61,"filings_prev_12m":48,"green_card_filings_12m":13,"median_offered_wage_usd":129527,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":29,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-12T10:03:55Z"},"pay":{"stated_usd_annual":346800,"is_top_pay":true},"html_url":"https://alion.io/job/dxc-technology-director-information-security","json_url":"https://alion.io/job/dxc-technology-director-information-security.json","meta":{"generated_at":"2026-11-12T10:03:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20459,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":88},"rest":"https://alion.io/mcp/rest/get_company?id=88"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdxc-technology-director-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdxc-technology-director-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdxc-technology-director-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dxc-technology-director-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdxc-technology-director-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4148843}},{"tool":"search_jobs","arguments":{"company":"dxc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4148843},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}