Sr Manager, Vulnerability Management & Policy Compliance

Reporting to the Head of Attack Surface Management you will play a vital role within the firms Information Security program. The Sr. Manager will be responsible to drive the strategy, maturity and operations of the Vulnerability Management and Policy Compliance functions. This position will lead a global team and work with internal service delivery units along with managed service providers to ensure that the NT is able to meets the needs of our partners, clients and regulators in this area.
Responsibilities:
• Develop, socialize and execute risk based strategies for Vulnerability Management and Policy Compliance functions.
• Understand the teams current capabilities and drive continuous improvement.
• Accountable for all associated security products within these functions including scanning, risk rating and ticketing.
• Brief senior leadership and different business units on relevant threats and recommend remediation activities to ensure security of the company's internal infrastructure.
• Manage and lead the global team including training and career development plans.
• Support and manage the delivery of services from Managed Service Providers and all other supporting vendors.
• Northern Trust's point leader for all regulatory, audit and client requests for these functions.
• Stay current on industry best practices in the cyber security space.
Qualifications:
• Senior Technologist / Manager with a proven track record of cyber leadership and delivery
• Demonstrated ability to lead large-scale operational cybersecurity programs.
• Proven ability to influence and mentor others in in a technology-focused environment.
• A College or University degree and/or relevant proven work experience is required.
• Communicates difficult concepts and negotiates with others to adopt a different point of view.
• In-depth Functional / Industry knowledge is required.
• Highly flexible and adaptable to change.
• Experience in supplier/vendor relationship and working with MSP's is required.