Vulnerability Manager

Tokio Marine HCC•Houston, TX

69d•Hybrid

About The Position

We are seeking a proactive, detail-oriented Vulnerability Manager to lead our enterprise vulnerability management program. This role is responsible for identifying, assessing, prioritizing, and coordinating the remediation of security vulnerabilities across the organization’s IT infrastructure, applications, and cloud environments. The ideal candidate will possess a strong technical background in cybersecurity and a passion for improving the organization’s security posture through continuous risk reduction and operational excellence. Your success is our priority. In a world that is rapidly changing, TMHCC enables you to take on opportunities with confidence. At Tokio Marine HCC, we pride ourselves on hiring the smartest, most conscientious people, who want to make a difference no matter their background. And then we give them the support and trust they need. We’re always looking for curious, creative transformative thinkers who want to change the status quo and have a passion for doing the right thing. If this is you, then we want you on our team.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
5+ years of experience in vulnerability management, security operations, or similar cybersecurity functions.
Strong knowledge of vulnerability scanning tools and techniques (e.g., Qualys, Tenable, Rapid7).
Familiarity with industry compliance frameworks such as PCI-DSS, ISO 27001, NIST, and CIS Controls.
Proven ability to influence remediation efforts and drive measurable risk reduction in large, complex environments.
Excellent communication and stakeholder management skills, with the ability to translate technical risks into business context.

Responsibilities

Develop and manage the enterprise vulnerability management lifecycle, including scanning, assessment, reporting, and remediation tracking.
Conduct regular vulnerability scans using tools such as Qualys, Tenable, or similar platforms.
Analyze scan results, validate findings, and collaborate with IT and development teams to prioritize and remediate vulnerabilities.
Maintain an accurate asset inventory and ensure comprehensive vulnerability coverage.
Collaborate with threat intelligence and incident response teams to assess exploitability and provide contextual risk insights.
Track remediation efforts and deliver regular status reports to leadership and stakeholders.
Develop and maintain dashboards and metrics to measure program effectiveness and demonstrate progress toward risk reduction.
Stay current on emerging threats, vulnerabilities, CVEs, and vendor advisories.
Support compliance and audit activities related to vulnerability management (e.g., PCI-DSS, ISO 27001, NIST).
Provide training and guidance to technical teams on secure configuration, patch management, and best practices in vulnerability management.