{"id":133855,"url":"https://alion.io/job/finastra-director-vulnerability-management","title":"Director, Vulnerability Management","company":{"id":3635,"name":"Finastra","domain":"finastra.com","url":"https://alion.io/company/finastra","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":21,"ghost_share":0,"stale_share":0.619,"repost_share":0.048,"time_to_fill_p50_days":41,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":133000,"max_usd":285000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":155},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CodeQL","optional":false},{"name":"CVSS","optional":false},{"name":"GitHub","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Veracode","optional":false},{"name":"Wiz","optional":false}],"status":"closed","first_seen_at":"2026-08-26T00:00:00Z","employer_posted_date":"2026-08-26","last_verified_at":"2026-10-19T21:45:53Z","board_verified":false,"closed_at":"2026-10-19T21:45:53Z","days_open":54,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":54},"description":"Who are we?\nAt Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission-critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.\nPosition Overview\nWe areseekingan experienced and strategic Director of Vulnerability Management to lead the organization's efforts toidentify, prioritize, remediate, and govern cybersecurity vulnerabilities across infrastructure, cloud environments, applications, and internally developed products.\nThis leader willbe responsible foradvancing a mature, risk-based vulnerability management program while partnering closely with Engineering, Product, Architecture, Infrastructure, DevOps, and Security Operations teams to embed security throughout the software development lifecycle. The successful candidate will combine strong technicalexpertise, program leadership, and stakeholder management skills to reduce enterprise risk and enable secure business growth.\nKey Responsibilities\nEnterprise Vulnerability Management\nOwn and mature the enterprise vulnerability management program across infrastructure, endpoints, cloud platforms, applications, containers, and third-party technologies.\n\nEstablish risk-based prioritization methodologies that consider exploitability, business criticality, threat intelligence, and asset exposure.\n\nDefine andmaintainvulnerability management standards, operational procedures,remediationSLAs, exception processes, and governance frameworks.\n\nDrive accountability for remediation efforts and ensuretimelyresolution of critical and high-risk vulnerabilities.\n\nLead executive reporting and board-level metrics related to vulnerability exposure, remediation performance, and cyber risk reduction.\n\nCoordinate enterprise response efforts for critical vulnerabilities, zero-day threats, and actively exploited security issues.\n\nProgram Governance & Risk Management\nCollaborate with Risk, Compliance, Audit, Privacy, and Legal teams to ensure alignment with regulatory and industry requirements.\n\nManage vulnerability exception processes and risk acceptance frameworks.\n\nSupport regulatory examinations, customer security assessments, internal audits, and external audits.\n\nDevelop andmaintainmeaningful KPIs and KRIs thatdemonstrateprogram effectiveness and risk reduction.\n\nLeadership & Organizational Development\nBuild, lead, and mentor a high-performing team of vulnerability managementprofessionals.\n\nFoster strong partnerships across Engineering, Infrastructure, Operations, and business leadership teams.\n\nEstablish a culture of accountability, collaboration, innovation, and continuous improvement.\n\nProvide strategic guidance and subject matterexpertiseto executive leadership on emerging threats, vulnerability trends, and secure product development practices.\n\nRequired Qualifications\nEducation\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, ora relateddiscipline.\n\nEquivalentcombination of education and relevant experience will be considered.\n\nExperience\nProgressive cybersecurity experience, including vulnerability management, application security, product security, or related security disciplines.\n\nLeadership experience managing security teams, programs, or enterprise initiatives.\n\nDemonstrated success leading vulnerability management programs in large-scale enterprise environments.\n\nExperience partnering with software engineering organizations and implementing secure development practices.\n\nStrong background in cyber risk management, governance, and executive communications.\n\nTechnical Expertise\nDeep understanding of vulnerability management frameworks, CVSS, exploitability analysis, threat intelligence integration, and remediation prioritization.\n\nStrong knowledge of secure software development practices and application security principles.\n\nExperience with vulnerability management and application security platforms such as Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, Microsoft Defender, GitHub Advanced Security,CodeQL, Veracode,Checkmarx, or similar solutions.\n\nFamiliarity with cloud environments, containers, Kubernetes, CI/CD pipelines, APIs, and modern software architectures.\n\nAbility to communicate technical risks effectively to both technical and non-technical audiences.\n\nCertifications (Preferred)\nCISSP\n\nCISM\n\nRelevant cloud security certifications\n\nPreferred Qualifications\nExperience leading Product Security orDevSecOpstransformation initiatives.\n\nExperience implementing secure-by-design principles within enterprise software development environments.\n\nFamiliarity with software supply chain security and emerging secure software development regulations.\n\nExperience supporting highly regulated industries, including financial services, healthcare, insurance, or critical infrastructure sectors.\n\nExperienceleveragingautomation and AI-driven security capabilities to improve vulnerability management and security operations.\n\nLeadership Competencies\nThe ideal candidate willdemonstrate:\nStrategic thinking and business acumen.\n\nStrong executive presence and communication skills.\n\nAbility to influence without direct authority.\n\nData-driven decision-making and risk prioritization.\n\nEffective stakeholder management across technical and business functions.\n\nA commitment to talent development, inclusiveness, and continuous improvement.\n\nSuccess Measures\nSuccess in this role will be measured through:\nReduction of enterprise vulnerability exposure and risk.\n\nImprovement in remediation performance and SLA compliance.\n\nIncreased adoption of secure development practices across engineering teams.\n\nEnhanced visibility and reporting of cyber risk to executive leadership.\n\nSuccessful integration of security into product and technology delivery processes.\n\nPositive audit, regulatory, and customer security assessment outcomes.\n\nWe are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for:\nFlexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.\nWell-being: Access confidential one-to-one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive-inside and outside of work.\nHealth & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.*\nSustainability: Paid time off for volunteering and donation-matching opportunities to support causes that matter to you.\nInclusion: Get involved in our inclusion communities, such as Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, and Women@Finastra-open to everyone who wants to participate and contribute.\nCareer Development: Access online learning and accredited courses through our Skills & Career Navigator tool.\nRecognition: Take part in our global recognition program, Finastra Celebrates, and share your voice through regular employee surveys that help shape our culture and ways of working.\n*Specific benefits may vary by location.\nAt Finastra, each individual is unique-bringing their own ideas, perspectives, cultural backgrounds, and experiences. We learn from one another, value what makes us different, and create an environment where everyone feels included, supported, and able to be their authentic selves.\nBe unique. Be exceptional. Help us make a difference at Finastra.\nApplicants for this position need to be located in posted location or their immediate surrounding areas. Due to the requirements of this position, this job posting is not available for, and Finastra will not be considering any applicants who currently reside in New York City or California.","description_format":"text","description_chars":8102,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"New York","iso":null,"kind":"city"},{"name":"California","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-08-26T00:00:00Z"},{"event":"open","at":"2026-08-31T04:18:51Z"},{"event":"close","at":"2026-10-19T21:45:53Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":277500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/finastra-director-vulnerability-management","json_url":"https://alion.io/job/finastra-director-vulnerability-management.json","meta":{"generated_at":"2026-10-21T21:14:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30170,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3635},"rest":"https://alion.io/mcp/rest/get_company?id=3635"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffinastra-director-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffinastra-director-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffinastra-director-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/finastra-director-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffinastra-director-vulnerability-management"}]}