Sr. Manager, Enterprise Patch & Vulnerability Management

Berkley•Wilmington, DE

2d•$127,050 - $181,500

About The Position

The Sr. Manager, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability responsible for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. The role leads technical planning, orchestration, and execution of patch-related changes, working with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to remediate patches, vulnerabilities, hardening items, and posture management findings within established SLAs. The position is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, and incident escalation. It calls for technical breadth across enterprise platforms, strong analytical and troubleshooting skills, operational discipline, and the ability to collaborate with and influence technical teams without direct authority. The role also provides day-to-day technical direction to an offshore execution pod and supports reporting, documentation, automation, service validation, and continuous improvement.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline; equivalent experience and/or alternative qualifications will be considered.
At least 5 years of technical experience.
At least 3 years of hands-on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operations.
Experience leading technical execution of enterprise change and maintenance activities across multiple platforms.
Hands-on experience with patch and vulnerability tooling.
Experience applying AI, analytics, or automation tools to operational or security data.
Working knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.
Ability to plan, sequence, and safely execute enterprise patch deployments.
Ability to analyze vulnerability findings, prioritize remediation, and drive SLA compliance.
Ability to lead technical change planning, implementation, validation, and rollback across platforms.
Ability to evaluate exposure, compensating controls, and residual risk for exception decisions.
Ability to triage, escalate, and coordinate resolution of patch-related incidents.

Nice To Haves

Automation and scripting skills to improve deployment reliability, reporting, and evidence collection.

Responsibilities

Lead enterprise patch-related change orchestration and execution, including automated deployment plans, sequencing, maintenance windows, dependencies, rollback procedures, change records, and technical coordination during maintenance events.
Coordinate remediation across products onto shared maintenance windows to reduce repeated system touchpoints, end-user disruption, and change collisions.
Use AI-enabled tools, analytics, and automation to analyze vulnerability scans, threat intelligence, and patch information; correlate findings to assets and service owners; assess deployment risk and service impact; identify trends and root causes; and recommend data-driven priorities.
Validate AI-generated outputs and use them in alignment with BTS security, data, and responsible AI standards.
Review patch and vulnerability exception requests, assess justification, compensating controls, residual risk, and timelines, provide technical recommendations, and track exceptions through reevaluation and closure.
Act as an escalation point for patch-related incidents, failed deployments, and service degradation; triage issues, engage resolver groups, coordinate rollback or remediation, escalate critical issues, and participate in post-incident and problem reviews.
Provide day-to-day technical direction to the offshore execution pod, including remediation wave planning, handoffs, automated testing, queue prioritization, evidence quality, and off-hours readiness; review its work for accuracy and completeness.
Partner with teams to remediate critical, high, medium, and low vulnerabilities, hardening items, and posture management findings across network devices within established SLAs.
Work with product owners to prioritize and drive code changes for vulnerability remediation; leverage AI tools for code analysis, remediation recommendations, and fix validation.
Lead tiered service health validation after remediation, confirm operational readiness, capture evidence, and implement new tests when disruptions reveal coverage gaps.
Partner with SRE, DevOps, Platform Engineering, and product owners to improve automated checkout and validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.
Review offshore execution pod reporting on patch compliance, vulnerability aging, SLA adherence, deployment success, exception status, and incident trends, providing technical insight for management and executive reporting.
Develop and maintain technical runbooks, standard operating procedures, and knowledge articles, and identify improvements to patching reliability, deployment risk, and automation coverage.