• Guide and manage the enterprise vulnerability management lifecycle with a focus on maturing processes for scanning, triage, risk scoring, remediation tracking, and continuous improvement • Optimize the vulnerability management platform and related tools, ensuring accurate, automated, and scalable coverage across infrastructure, applications, and cloud environments • Develop and deliver meaningful metrics and executive reporting to drive accountability, measure progress, and inform leadership on risk posture • Act as a thought leader in vulnerability risk management, influencing remediation strategies, prioritization decisions, and long-term technology lifecycle planning • Lead and facilitate technical discussions and investigations to address critical vulnerabilities in a timely and effective manner • Partner cross-functionally with IT, Engineering, and other teams to identify, track, and mitigate risks tied to end-of-life systems, unsupported technologies, and legacy microservices, ensuring proactive upgrade, re-platforming, or decommission strategies • Manage CSPM tracking, providing visibility into cloud misconfigurations, over-permissioned identities, and cloud-native vulnerabilities, and driving remediation in partnership with other teams across the organization