Job Description

Area(s) of responsibility

Role Summary

We are seeking a highly experienced Cybersecurity professional to lead Vulnerability Management, Attack Surface Management, Security Risk Governance, and Security Infrastructure Operations across the enterprise. The candidate will be responsible for architecting, implementing, and optimizing Tenable Nessus, BitSight, and Infoblox solutions while driving enterprise-wide risk reduction initiatives, vulnerability remediation programs, DNS security, compliance efforts, and cybersecurity governance.

Key Responsibilities

• Lead the administration, engineering, and lifecycle management of Tenable Nessus, BitSight, and Infoblox platforms.
• Define and implement enterprise Vulnerability Management and Risk Management strategies aligned with security and compliance objectives.
• Manage large-scale vulnerability assessment programs across on-premises, cloud, network, server, endpoint, and application environments.
• Establish risk-based vulnerability prioritization methodologies and remediation governance processes.
• Drive vulnerability remediation programs by collaborating with Infrastructure, Cloud, Application, Network, and Security Operations teams.
• Develop executive-level dashboards, KPI/KRI metrics, risk scorecards, and remediation tracking reports.
• Oversee cyber risk exposure monitoring and external attack surface assessment using BitSight.
• Assess third-party security posture, cybersecurity ratings, and supplier risk metrics, and provide strategic recommendations to reduce business risk.
• Lead security posture reviews and risk assessments and provide recommendations to senior leadership.
• Architect, administer, and optimize Infoblox DDI (DNS, DHCP, and IP Address Management) infrastructure.
• Ensure high availability, scalability, performance, and security of enterprise DNS and IP management services.
• Implement DNS security controls, network visibility solutions, and operational best practices.
• Lead upgrades, migrations, patching, capacity planning, performance tuning, and operational enhancements for security platforms.
• Support internal and external audits, regulatory assessments, compliance initiatives, and risk management programs.
• Develop operational standards, governance frameworks, SOPs, runbooks, and service improvement plans.
• Drive automation and process optimization initiatives to improve efficiency and reduce operational risks.
• Engage with vendors and stakeholders to define product roadmaps, resolve complex issues, and evaluate emerging technologies.
• Mentor junior engineers and provide technical leadership across vulnerability management and security infrastructure domains.

Required Skills

Security Platforms

• Tenable Nessus
• BitSight
• Infoblox DDI

Technical Expertise

• Enterprise Vulnerability Management
• Risk-Based Vulnerability Prioritization
• Security Risk Assessment & Governance
• External Attack Surface Management
• Third-Party Risk & Security Ratings
• DNS, DHCP & IP Address Management (DDI)
• DNS Security & Network Infrastructure Security
• Security Compliance & Regulatory Requirements
• Security Architecture & Engineering
• Security Reporting & Executive Dashboarding
• Security Operations & Governance
• Process Automation & Continuous Improvement