Vulnerability Response Manager - Assistant Vice President

Deutsche Bank•Jacksonville, FL

4d•Hybrid

About The Position

The Vulnerability Response Manager leads the organization’s vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritized, remediated, and governed. The role reduces cyber risk exposure by coordinating remediation across infrastructure, cloud, application, and technology teams while ensuring compliance with internal policies, regulatory requirements, and remediation SLAs. The position is based in Jacksonville, Florida, and follows the Bank’s hybrid working model, with employees expected to work in the Jacksonville office in accordance with that model.

Requirements

Significant experience in vulnerability management, cybersecurity operations, and cyber defense within complex enterprise environments.
A proven track record leading large-scale vulnerability remediation programs and reducing cyber risk exposure.
Strong understanding of vulnerability assessment and prioritization methodologies, including CVSS and risk-based remediation approaches.
Experience managing technology risk, remediation governance, and cross-functional stakeholder engagement.
Knowledge of key regulatory and security frameworks, including NIST SP 800-40, NIST Cybersecurity Framework, ISO 27001, DORA, and FCA/PRA requirements.
Proven ability to leverage AI tools to enhance productivity and optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Nice To Haves

Excellent communication and stakeholder management skills, with the ability to influence technology, security, and risk teams to drive timely vulnerability remediation.
Strong analytical and problem-solving capabilities to prioritize vulnerabilities based on threat intelligence, business impact, and risk exposure.
Ability to perform effectively in high-pressure situations, including zero-day and actively exploited vulnerability response scenarios.
Relevant industry certifications such as CISSP, CISM, CRISC, GSEC, or equivalent cybersecurity qualifications.
Self-motivated and collaborative leadership, with a continuous improvement mindset focused on strengthening cyber resilience, operational effectiveness, and regulatory compliance.

Responsibilities

Manage the end-to-end serious vulnerability response and resolution lifecycle.
Prioritize vulnerabilities based on severity, exploitability, business criticality, and threat intelligence.
Lead and manage vulnerability remediation activities across global technology teams.
Ensure critical and high-risk vulnerabilities are remediated within agreed SLAs.
Drive accelerated response activities for actively exploited and zero-day vulnerabilities.
Produce management information and executive reporting.