# Information Security Vulnerability Manager

**Company**: S&P Global
**Location**: New York, NY
**Experience**: senior
**Job type**: full-time
**Salary**: $125,000 to $145,000
**Category**: Security
**Industry**: Technology

**Apply**: https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/New-York-NY/Lead-InfoSec-Engineer--Vulnerability-Management_328781-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_d203b024-138

## Description

## About the Role:

We are seeking an experienced Information Security Vulnerability Manager to lead our enterprise-wide vulnerability management lifecycle across infrastructure, cloud, and application environments. You will provide strategic oversight and risk-based prioritization to protect critical business assets.

## Responsibilities and Impact:

- Lead enterprise-wide vulnerability management lifecycle across infrastructure, cloud, and application environments

- Drive cross-functional collaboration with application teams, IT managers, and business stakeholders to ensure timely vulnerability remediation

- Develop comprehensive reporting and metrics programs to provide executive leadership with clear visibility into organizational security posture and risk trends

- Mentor and guide junior security professionals while contributing to program maturity through process improvements, governance frameworks, and tooling strategy development

- Support regulatory compliance and audit activities by ensuring alignment with enterprise security policies, industry standards, and emerging technology risk management requirements

- Establish and monitor key performance indicators for vulnerability remediation, creating accountability frameworks that drive measurable improvements in security outcomes

## What We're Looking For:

### Basic Required Qualifications:

- 7+ years of operational security experience in vulnerability management, application security testing, or technical project management within large-scale, distributed enterprise environments

- Deep expertise in vulnerability assessment frameworks including CVE, CVSS, CWE, and experience with enterprise vulnerability management platforms such as Qualys, Tanium, Rapid7, or similar solutions

- Strong application security knowledge with ability to assess risk, map vulnerabilities to exploitation techniques, and translate complex technical findings into actionable business recommendations

- Experience with application security testing tools including DAST/SAST platforms such as Fortify, Checkmarx, Veracode, or equivalent application security testing solutions

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology or equivalent professional experience in information security roles

- Proven leadership and influence capabilities with demonstrated ability to drive cross-functional initiatives and stakeholder alignment without direct authority

- Excellent analytical and communication skills with the ability to present security risks and recommendations to both technical teams and executive audiences

- Relevant information security certifications such as CISSP, CISM, CEH, GCIH, or equivalent industry-recognized credentials

### Additional Preferred Qualifications:

- Advanced vulnerability management expertise with experience leading complex assessments across on-premises and cloud environments

- Proficiency in security reporting and analytics tools such as Power BI, Tableau, or similar platforms for developing executive-level dashboards and security metrics visualization

- Strong knowledge of information security frameworks including NIST Cybersecurity Framework, ISO 27001, and risk management methodologies with experience supporting audit and regulatory compliance activities

- Foundational understanding of emerging technologies including cloud platforms, AI/ML systems, and associated security risks

## Compensation/Benefits Information:

The anticipated base salary range for this position is $125,000 to $145,000.

## Benefits:

- Health & Wellness: Health care coverage designed for the mind and body

- Flexible Downtime: Generous time off helps keep you energized for your time on

- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills

- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs

- Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families

- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Vulnerability management
- Application security testing
- Technical project management
- CVE
- CVSS
- CWE
- Qualys
- Tanium
- Rapid7
- Fortify
- Checkmarx
- Veracode
- Communication skills
- Analytical skills

### Nice to have
- Power BI
- Tableau
- NIST Cybersecurity Framework
- ISO 27001
- Cloud platforms
- AI/ML systems

---

Source: [Apply at spgi.wd5.myworkdayjobs.com](https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/New-York-NY/Lead-InfoSec-Engineer--Vulnerability-Management_328781-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)