Sr. Manager, Enterprise Patch & Vulnerability Management

Berkley•Wilmington, DE

About The Position

The Sr. Manager, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability responsible for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. The role leads technical planning, orchestration, and execution of patch-related changes, partnering with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to ensure remediation is completed within established SLAs. The position is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, incident escalation, and technical direction for an offshore execution pod. It requires broad technical knowledge across enterprise platforms, strong analytical and troubleshooting skills, operational discipline, and the ability to collaborate with and influence technical teams without direct authority. The role reports to the Sr. Manager, Enterprise Patch & Vulnerability Management.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline; equivalent experience and/or alternative qualifications will be considered.
At least 5 years of technical experience.
At least 3 years of hands-on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operations.
Experience leading technical execution of enterprise change and maintenance activities across multiple platforms.
Hands-on experience with patch and vulnerability tooling.
Experience applying AI, analytics, or automation tools to operational or security data.
Working knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.
Ability to plan, sequence, and execute enterprise patch deployments safely and consistently.
Ability to analyze vulnerability findings, prioritize remediation, and drive SLA compliance.
Ability to lead technical change planning, implementation, validation, and rollback across platforms.
Ability to evaluate exposure, compensating controls, and residual risk to support exception decisions.
Ability to triage, escalate, and coordinate resolution of patch-related incidents.

Nice To Haves

Automation and scripting skills to improve deployment reliability, reporting, and evidence collection.

Responsibilities

Lead technical orchestration and execution of patch-related changes across the enterprise, including deployment plans, maintenance windows, dependencies, rollback procedures, change records, and coordination during maintenance events.
Coordinate remediation across products onto shared maintenance windows to reduce repeated system changes, end-user disruption, and change collisions.
Use AI-enabled tools, analytics, and automation to analyze vulnerability scans, threat intelligence, and patch releases; correlate findings to assets and service owners; assess deployment risk and service impact; identify trends and root causes; and recommend remediation priorities.
Validate AI-generated outputs in accordance with BTS security, data, and responsible AI standards.
Review patch and vulnerability exception requests, assessing business justification, compensating controls, residual risk, and remediation timelines; provide recommendations and track exceptions through expiration, reevaluation, and closure.
Act as an escalation point for patch-related incidents, failed deployments, and post-maintenance service degradation; triage issues, engage resolver groups, coordinate rollback or remediation, escalate critical issues, and participate in post-incident and problem management reviews.
Provide day-to-day technical direction to the offshore execution pod, including remediation wave planning and handoffs, automated testing, ticket prioritization, evidence quality, and off-hours readiness; review work for accuracy and completeness.
Partner with teams to remediate vulnerabilities, hardening items, and posture management findings across network devices within established SLAs.
Work with product owners to prioritize and drive code changes needed for vulnerability remediation; use AI-based tools for code analysis, remediation recommendations, and fix validation.
Lead tiered service health validation after remediation, confirm operational readiness, capture evidence, and implement tests when disruptions expose coverage gaps.
Partner with SRE and DevOps, Platform Engineering, and product owners to improve automated checkout and validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.
Review and analyze offshore execution pod reporting on patch compliance, vulnerability aging, SLA adherence, deployment success, exception status, and incident trends, providing technical insight for management and executive reporting.
Develop and maintain technical runbooks, standard operating procedures, and knowledge articles, and improve patching reliability, deployment risk, and automation coverage.