Threat and Vulnerability Manager

• Responsible of the management and integration of processes tools technologies and security services aimed at the discovery curation and remediation of security threats and vulnerabilities.
  
• Leverage leadingedge technologies and innovative approaches to position Hologic for measurable success improving efficiency increasing security posture supporting aggressive growth.
  
• Excellent engagement and communication skills with senior enterprise stakeholders IT (Information Technology) leadership and solution delivery peers.
  
• Strong customerfocused teamoriented approach that balances security needs and user experience to provide bestinclass security to the organization.
  
• Responsible for developing and executing Hologics strategy to manage cyber security threats and reduce vulnerabilities. Managing the endtoend vulnerability lifecycle
  
• Performing and reporting on vulnerability scans
  
• Engaging in stakeholder management
  
• Working in tandem with architecture and engineering teams
  
• Lifecycle management of threat and vulnerability tools
  
• Developing Threat Models
  
• Developing Risk Taxonomy
  
• Developing and maturing Objectives and Key Results for the program
  
• Developing Key Performance Indicators and Key Risk Indicators for threats and vulnerabilities to Hologics information assets
  
• Working with various groups to conduct ad hoc testing of remediation activities
  
• Maintaining current knowledge and understanding of threats emerging threats and vulnerabilities.
  
• Building leading and growing the Threat and Vulnerability function
  

Requirements

• 35 years in vulnerability assessments and/or penetration testing
  
• 4 years combined solid experience in one of the major V.M Scanners (Qualys Tenable Rapid7)
  
• Experience in Healthcare or Manufacturing environments a plus.
  
• CISSP or CISSPISSMP
  
• SANS Certifications are a plus GPEN GCWN GWAPT GXPN GDAT
  

• Bachelor s degree desirable in information technology Information Security or relevant field.
  
• Advanced degree may be helpful but not required.
  

Experience:

• More of 8 years of Information Security experience
  
• At least two years of experience leading teams.