Responsibilities

• Lead the enterprise vulnerability remediation program, ensuring timely resolution of security vulnerabilities in accordance with established risk-based priorities and service level objectives.
• Partner with Security, IT Operations, Infrastructure, Application Support, and Delivery teams to coordinate remediation activities and drive accountability across the organization.
• Establish and maintain governance frameworks, including ownership models, escalation processes, prioritization criteria, and remediation standards.
• Develop and deliver executive reporting and dashboards that provide visibility into vulnerability exposure, remediation progress, SLA performance, risk trends, and operational effectiveness.
• Monitor remediation metrics, including vulnerability aging, remediation velocity, and mean time to remediate (MTTR), and drive corrective actions when targets are not met.
• Serve as the primary escalation point for remediation challenges, balancing security requirements, business priorities, and operational constraints to achieve effective outcomes.
• Partner with security and technology teams to optimize vulnerability management tools, reporting capabilities, integrations, and data quality standards.
• Integrate vulnerability remediation activities into change management, release management, maintenance, and operational support processes to minimize business disruption.
• Conduct trend analysis and root cause investigations to identify recurring vulnerabilities, process gaps, control weaknesses, and remediation obstacles.
• Drive automation and process improvement initiatives that enhance remediation efficiency, reduce manual effort, and strengthen operational resilience.
• Collaborate with security leadership to assess emerging threats, critical vulnerabilities, and evolving industry practices, adjusting remediation strategies as needed.
• Foster a culture of risk-based decision making by educating stakeholders on vulnerability impact, business risk, and remediation priorities.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or related field, or equivalent professional experience.
• 7+ years of experience in IT Operations, Cybersecurity, IT Service Management, Infrastructure Operations, or a related technology discipline.
• 3+ years of experience leading enterprise vulnerability management, remediation programs, patch management initiatives, or closely related security operations functions.
• Demonstrated experience influencing cross-functional teams and driving results in complex matrixed environments.
• Strong knowledge of vulnerability management processes, risk prioritization methodologies, and remediation best practices.
• Experience with vulnerability management platforms such as Qualys, Tenable/Nessus, Rapid7, Microsoft Defender Vulnerability Management, or similar technologies.
• Working knowledge of ITIL practices, including incident, problem, change, and service management processes.
• Strong analytical and problem-solving skills with the ability to identify trends, root causes, and operational improvement opportunities.
• Experience developing executive-level reporting, KPIs, dashboards, and performance metrics.
• Excellent verbal, written, presentation, and stakeholder management skills.
• Experience supporting cloud, hybrid, and on-premises technology environments.
• Familiarity with automation, scripting, or workflow orchestration technologies such as PowerShell, Python, Bash, or similar tools.

Preferred Qualifications

• ITIL Foundation, ITIL Managing Professional, or equivalent service management certification.
• CISSP, CISM, CRISC, Security+, CGRC, or other relevant cybersecurity certifications.
• Experience working in highly regulated industries such as financial services, healthcare, insurance, or critical infrastructure.
• Knowledge of NIST Cybersecurity Framework, NIST Vulnerability Management guidance, CIS Controls, ISO 27001, or similar frameworks.
• Experience with cloud platforms including Microsoft Azure, AWS, or Google Cloud Platform.
• Familiarity with DevSecOps, CI/CD security practices, and automated remediation workflows.
• Experience implementing vulnerability risk-based prioritization methodologies and threat intelligence-driven remediation programs.
• Experience using reporting and visualization platforms such as Power BI, Tableau, ServiceNow, or similar analytics tools.
• Exposure to enterprise-scale endpoint, server, network, and application security programs.

The duties listed above are the essential functions, or fundamental duties within the job classification.  The essential functions of individual positions within the classification may differ. Texas Capital Bank may assign reasonably related additional duties to individual employees consistent with standard departmental policy.Texas Capital is an Equal Opportunity Employer.