Director - Infrastructure Security

ADP•Roseland, NJ

6d•Hybrid

About The Position

The Director of Infrastructure Security is responsible for leading the execution, governance, and continuous evolution of the enterprise server and endpoint vulnerability management program in a complex hybrid environment spanning on-prem and cloud infrastructure. This role is responsible for driving risk identification and reduction aligning to enterprise security objectives in a rapidly changing landscape. This role requires a combination of technical expertise and people leadership with the ability to translate security objectives to relevant stakeholders.

Requirements

Bachelor's degree or equivalent experience
8+ years cybersecurity/infrastructure security experience
5+ years' experience leading enterprise-scale vulnerability management programs
Relevant Certifications such as CISSP, CISM etc. or equivalent experience
Expertise with managing server hosts (Windows, Linux) in a hybrid environment including public cloud platforms. (AWS, Azure, GCP)
Experience with security platforms such as Qualys, Wiz, CrowdStrike, etc.
Experience with custom reporting using database platforms/tools and reporting visualization tools such as Grafana or Power BI.

Responsibilities

Lead day-to-day operations of the enterprise vulnerability management program supporting servers, endpoints and infrastructure services.
Partner with infrastructure, cloud, endpoint, application, and product technology teams to drive remediation planning and execution.
Oversee vulnerability assessment platforms and associated technologies.
Identify and implement automation opportunities that improve vulnerability discovery, prioritization and reporting.
Support and execute strategic initiatives that improve vulnerability identification, prioritization, remediation, and reporting capabilities.
Support and Develop risk-based vulnerability management methodologies incorporating exploitability, threat intelligence, asset criticality, business impact, and exposure factors.
Drive continuous improvement initiatives that increase effectiveness, automation, operational efficiency, and program maturity.
Lead and mentor a high performing team of analysts within the CVM program.
Foster a culture of accountability, collaboration, innovation, and continuous improvement.
Collaborate and partner with peer leaders within the team to drive cross functional program initiatives
Build partner relationships with key stakeholders.
Develop executive dashboards, KPIs, KRIs, and scorecards.
Present vulnerability trends, remediation performance, and risk posture to senior leadership.
Translate technical findings into business-focused risk communications.
Support audits, regulatory assessments, and compliance reviews.