Seeking a seasoned Cybersecurity leader to drive Vulnerability Management, Attack Surface Management, Security Risk Governance, and Security Infrastructure Operations. This role involves architecting and implementing solutions like Tenable Nessus, BitSight, and Infoblox to reduce enterprise risk, manage vulnerabilities, and enhance DNS security and compliance.

This position offers a significant opportunity to shape cybersecurity strategies and implement critical security programs across the organization, ensuring robust governance and risk reduction.

Oversee administration and lifecycle management of Tenable Nessus, BitSight, and Infoblox platforms. Develop enterprise-wide Vulnerability and Risk Management strategies aligned with security and compliance goals. Manage extensive vulnerability assessment programs across diverse environments, from on-premises to cloud. Establish risk-based prioritization and remediation governance. Drive collaboration with various teams for vulnerability remediation.

Create executive-level reports, KPIs, and risk scorecards. Monitor cyber risk exposure and external attack surfaces using BitSight. Assess third-party security, supplier risks, and provide strategic recommendations. Lead security posture reviews and risk assessments. Architect and optimize Infoblox DDI infrastructure, ensuring high availability, scalability, and security.

Implement DNS security controls and network visibility. Lead upgrades, migrations, and operational enhancements for security platforms. Support audits and compliance initiatives. Develop operational standards, SOPs, and runbooks. Drive automation for efficiency and risk reduction. Collaborate with vendors on product roadmaps and emerging technologies. Mentor junior engineers and provide technical leadership.

Proven expertise in managing Tenable Nessus, BitSight, and Infoblox DDI solutions. Strong understanding of enterprise vulnerability management, risk-based prioritization, and security governance. Experience with external attack surface management, third-party risk assessment, and security ratings is essential.

Proficiency in DNS, DHCP, and IP Address Management (DDI), including DNS security and network infrastructure hardening. Familiarity with security compliance, regulatory requirements, and security architecture. Ability to develop security reports and executive dashboards. Experience in security operations and governance is required.

Demonstrated ability in process automation and continuous improvement. Excellent communication and collaboration skills to work effectively with cross-functional teams and senior leadership. Experience mentoring technical staff is a plus. A proactive approach to identifying and mitigating security risks.