{"id":3908372,"url":"https://alion.io/job/querentia-vulnerability-manager","title":"Vulnerability Manager","company":{"id":4460938,"name":"Querentia","domain":"querentia.com","url":"https://alion.io/company/querentia","size_band":"1-10","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"C","score":57,"open_postings":218,"ghost_share":0.716,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Montreal, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Nessus","optional":false},{"name":"ITSM","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-04-27T00:00:00Z","employer_posted_date":"2026-04-27","last_verified_at":"2026-11-08T00:21:07Z","board_verified":true,"closed_at":null,"days_open":195,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":194},"description":"The Vulnerability Manager will lead the IT Infrastructure Cybersecurity Operations team, overseeing the enterprise-wide vulnerability remediation program for CA-CIB's infrastructure environment. This role bridges the Information Security team and IT Infrastructure platform teams, ensuring timely remediation of vulnerabilities across servers, networks, databases, and virtualization infrastructure while maintaining executive visibility through regular reporting.Key Responsibilities\nInfrastructure Vulnerability Remediation Management\nLead remediation efforts for vulnerabilities across IT Infrastructure domains.\nTrack vulnerabilities from Tenable, penetration testing, security assessments, and threat intelligence feeds\nMonitor remediation progress against established SLA deadlines\nEngage proactively with Infrastructure, Network, Database, and Virtualization teams to ensure timely closure\nMaintain comprehensive dashboards and metrics on vulnerability remediation status\nStakeholder Management & Reporting\nPresent monthly vulnerability management reports to IT Infrastructure Management Steering Committee and CISO office\nProvide executive insights on remediation trends, infrastructure risk exposure, and program effectiveness\nEscalate critical infrastructure vulnerabilities to CTO, Infrastructure Directors, and Risk Management\nTechnical Guidance & Infrastructure Support\nProvide expert guidance on remediation strategies, patching approaches, and configuration hardening\nTroubleshoot complex remediation scenarios involving legacy systems, business-critical infrastructure, or technical dependencies\nRecommend best practices for infrastructure vulnerability mitigation aligned with banking industry standards\nAdvice on patch management strategies balancing security requirements with infrastructure stability\nRisk Acceptance & Control Validation\nReview and validate risk acceptance requests when immediate remediation is not feasible due to business criticality, legacy constraints, vendor limitations, or complex dependencies\nAssess adequacy of proposed compensating controls (network segmentation, access controls, monitoring)\nGuide teams in developing robust compensating controls that effectively reduce risk exposure\nEnsure risk acceptance documentation meets CA-CIB governance, regulatory, and compliance requirements.\nProgram Leadership & Governance\nDrive continuous improvement of the infrastructure vulnerability management program\nDevelop and maintain vulnerability management policies, procedures, and workflows aligned with CA-CIB IT governance\nFoster collaboration between Information Security and IT Infrastructure teams\nSupport regulatory examinations and audits related to infrastructure security\nRequired Qualifications\nBachelor's degree in Computer Science, Information Technology, Information Security, or related field\n7+ years of experience in IT infrastructure security, cybersecurity operations, or vulnerability management within banking or financial services\n3+ years in a leadership or management role\nStrong understanding of vulnerability assessment tools (Tenable/Nessus) and infrastructure scanning methodologies\nExperience with risk management frameworks and control validation in regulated environments\nProven ability to communicate technical infrastructure security concepts to executive audiences\nUnderstanding of banking regulatory requirements and IT risk management\nPreferred Qualifications\nRelevant certifications: CISSP, CISM, or similar\nExperience with vulnerability management platforms and ITSM systems (ServiceNow)\nBackground in both information security and IT infrastructure operations\nExperience working in large, complex banking IT environments\nEnglish (mandatory), French language skills (preferred)\nKey Competencies\nStrong analytical and problem-solving skills with infrastructure focus\nExcellent communication and presentation abilities in English\nProactive and results-oriented mindset with ability to work under regulatory pressure\nAbility to influence infrastructure teams without direct authority\nStrategic thinking with attention to operational detail and business impact\nStakeholder management and negotiation skills across technical and business functions\nAbility to balance security requirements with business continuity and operational resilience\nWorking Environment\nLocation: Montreal, Quebec\nWorking from home on a voluntary basis for up to 2 days per week after 3 months of joining\nCollaboration with global IT Infrastructure and Security teams\n• Exposure to senior IT and Risk leadership","description_format":"text","description_chars":4561,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"French","level":"All levels","optional":true},{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-11-07T04:56:30Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.222,"p_room":0.28,"age_days":194,"expected_fill_days":31,"reasons":["conf:0","agency","stale_co","urgency","ghost","win:tail","crowd:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/querentia-vulnerability-manager","json_url":"https://alion.io/job/querentia-vulnerability-manager.json","meta":{"generated_at":"2026-11-08T00:28:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1087,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4460938},"rest":"https://alion.io/mcp/rest/get_company?id=4460938"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquerentia-vulnerability-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquerentia-vulnerability-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquerentia-vulnerability-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/querentia-vulnerability-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquerentia-vulnerability-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3908372}},{"tool":"search_jobs","arguments":{"company":"querentia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3908372},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}