Security LEAD (Vulnerability Management)

InstantServe LLC • Houston, TX

9h

About The Position

InstantServe offers a dynamic work environment where you can make a significant impact on the healthcare industry. This role focuses on Vulnerability Management, involving the establishment and maintenance of a centralized vulnerability baseline, risk classification and prioritization, coordination of remediation efforts, continuous tracking, metrics, reporting, validation, and closure of vulnerabilities. The position also supports program improvement by identifying process gaps and recommending enhancements, ensuring alignment with NIST standards and Agency policies.

Responsibilities

• Review existing vulnerability data from scans, assessments, and security tools
• Establish and maintain a centralized vulnerability baseline
• Develop and document risk-based remediation timelines, considering vulnerability aging and current risk posture
• Categorize and prioritize vulnerabilities based on severity, exploitability, risk level, and operational impact
• Ensure alignment with National Institute of Standards and Technology (NIST) guidelines
• Validate that remediation timelines align with Agency-defined SLAs for each risk category
• Coordinate remediation efforts with system, server, and application owners
• Communicate clear expectations, timelines, and risk context to stakeholders
• Track remediation progress and identify dependencies, blockers, and delays
• Escalate critical, high-risk, or overdue vulnerabilities in accordance with Agency governance processes
• Maintain continuous tracking of vulnerability remediation activities
• Generate regular status reports, including: Vulnerability status (open vs. closed), Aging and risk trends, Remediation performance metrics
• Validate remediation through scan results and supporting evidence
• Confirm closure of vulnerabilities within tracking systems
• Ensure unresolved vulnerabilities are formally documented with approved risk acceptance or exception records, per Agency policy
• Identify process gaps, systemic issues, and control weaknesses
• Recommend improvements to enhance remediation efficiency, governance, and accountability
• Ensure alignment with NIST standards and Agency policies

Benefits

• competitive compensation
• opportunities for professional growth
• supportive team culture

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 1-10 employees