Director - Infrastructure Security

The Director of Infrastructure Security is responsible for leading the execution, governance, and continuous evolution of the enterprise server and endpoint vulnerability management program in a complex hybrid environment spanning on-prem and cloud infrastructure.  

This role is responsible for driving risk identification and reduction aligning to enterprise security objectives in a rapidly changing landscape.

This role requires a combination of technical expertise and people leadership with the ability to translate security objectives to relevant stakeholders. 

Like what you see?  Apply now!

• Lead day-to-day operations of the enterprise vulnerability management program supporting servers, endpoints and infrastructure services.
• Partner with infrastructure, cloud, endpoint, application, and product technology teams to drive remediation planning and execution.
• Oversee vulnerability assessment platforms and associated technologies.
• Identify and implement automation opportunities that improve vulnerability discovery, prioritization and reporting.
• Support and execute strategic initiatives that improve vulnerability identification, prioritization, remediation, and reporting capabilities.
  • Support and Develop risk-based vulnerability management methodologies incorporating exploitability, threat intelligence, asset criticality, business impact, and exposure factors.
  • Drive continuous improvement initiatives that increase effectiveness, automation, operational efficiency, and program maturity.

• Lead and mentor a high performing team of analysts within the CVM program.
• Foster a culture of accountability, collaboration, innovation, and continuous improvement.
• Collaborate and partner with peer leaders within the team to drive cross functional program initiatives
• Build partner relationships with key stakeholders.

• Develop executive dashboards, KPIs, KRIs, and scorecards.
  • Present vulnerability trends, remediation performance, and risk posture to senior leadership.
  • Translate technical findings into business-focused risk communications.
  • Support audits, regulatory assessments, and compliance reviews.

To Succeed in This Role:

• Bachelor's degree or equivalent experience

Qualifications:

• 8+ years cybersecurity/infrastructure security experience
• 5+ years' experience leading enterprise-scale vulnerability management programs
• Relevant Certifications such as CISSP, CISM etc. or equivalent experience
• Expertise with managing server hosts (Windows, Linux) in a hybrid environment including public cloud platforms. (AWS, Azure, GCP)
• Experience with security platforms such as Qualys, Wiz, CrowdStrike, etc.
• Experience with custom reporting using database platforms/tools and reporting visualization tools such as Grafana or Power BI.

What are you waiting for?  Apply today!

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

(ADA version: https://youtu.be/IQjUCA8SOoA )

#LI-SD4

#LI-Hybrid