Threat & Vulnerability Management (TVM) is a program for identifying weaknesses and vulnerabilities in applications, cloud services, and physical IT infrastructure. The TVM team provides the knowledge, the tools, and guidance on how to address these vulnerabilities for Mars globally.  The purpose of this role is to manage the quality of the services we provide and improve delivery to all our stakeholders.

This role will be part of the Global TVM team. 

What will be your key responsibilities?

• Manage the end-to-end vulnerability management lifecycle, including identifying vulnerabilities using provided security tools, assessing and prioritizing remediation using a risk- and data-driven approach, coordinating remediation efforts with stakeholders, and validating fixes through follow-up verification.

• Support TVM program services to ensure stakeholders’ needs and challenges are met while also achieving information security strategic goals

• Take ownership of assigned TVM services by driving program execution, ensuring continuous maintenance, and actively promoting adoption and ongoing improvements to the program.

• Drive remediation activities for vulnerabilities identified in assets, devices, and applications across different areas and organizations.

• Develop and deploy workflows and runbooks for our various services and capabilities

• Guide and document workflows for the vulnerability remediation activities

• Facilitated cross-functional meetings with stakeholders to review open vulnerabilities, remediation plans, and overdue findings.

• Support and guide the continuous delivery of services

• Established and documented standardized vulnerability remediation workflows, improving efficiency, consistency, and tracking of remediation activities.

• Providing guidance and technical support to teams working to support devices or applications

• Proactive mindset to propose and seek opportunities for improvement on the services that are assigned

• Strong customer-focused attitude

• Self-motivated, patient, hands-on, and driven by a positive, solution-oriented attitude

• Great teamwork 

Job Specifications/Qualifications

• 3+ years of experience in either server administration, application development, networking, or a security function supporting vulnerability management

• Strong written and verbal communication skills.  Must be comfortable with presenting findings to others, including leadership.

• Ability to work both individually and as part of a team.

• Ability to write reports and statements in clear, objective, unambiguous language

• Language: Fluent in English. 

• Experience with a variety of tools and processes that can be used to assess vulnerabilities

• Experience managing programs and supporting large-scale platforms.

• Demonstrates strong documentation skills, constructing workflow diagrams and processes, publishing status reports, etc.

• Experience in creating and maintaining end-to-end processes is a plus.

• Experience with cloud platforms such as Azure, GCP, and AWS is a plus.

#TBdigital