Description

• Define and execute the roadmap for the Third-Party Remediation Pillar.
• Identify opportunities to automate vulnerability remediation and patch-management workflows.
• Reduce time between vulnerability identification, prioritization, testing, patch deployment, validation, and closure.
• Apply Generative AI, analytics, and automation to improve remediation prioritization, operational decision-making, testing, and workflow efficiency.
• Translate cybersecurity and infrastructure requirements into executable capabilities, user stories, acceptance criteria, roadmaps, and delivery priorities.
• Partner with infrastructure, cybersecurity, architecture, engineering, application, and operations teams.
• Lead complex cross-functional initiatives involving multiple technology organizations.
• Manage dependencies, risks, competing priorities, and organizational constraints.
• Establish measurable remediation KPIs and operational performance metrics.
• Provide executive-level reporting regarding vulnerability exposure, remediation velocity, patch compliance, automation adoption, exceptions, and technology risk.
• Drive continuous improvement across vulnerability-management and patching processes.

Product / Program Leadership

Although the client title is Business Analyst V, candidates with strong Product Owner, Product Manager, Technical Product Manager, or Program Leadership backgrounds are particularly relevant.

Highly desirable experience includes:

• 6+ years of Product Ownership or Product Management.
• 3+ years functioning at a senior, lead, or enterprise level.
• Ownership of technology roadmaps and strategic backlogs.
• Prioritization across competing security, infrastructure, and operational requirements.
• Agile product-delivery experience.
• Executive stakeholder management.
• Technology-risk or cybersecurity transformation programs.

GenAI Expectations

Candidates should have more than general familiarity with ChatGPT or other AI tools.

Relevant experience may include using GenAI or machine-learning capabilities to improve:

• Vulnerability prioritization.
• Risk classification.
• Patch recommendations.
• Remediation workflow automation.
• Test generation or validation.
• Incident or vulnerability summarization.
• Knowledge retrieval.
• Operational analytics.
• Decision support.
• Engineering productivity.

Candidates should be capable of explaining a GenAI capability they helped design, develop, integrate, implement, or operationalize.

Preferred Technology Experience

Experience with one or more of the following platforms is highly desirable:

• IBM BigFix
• Qualys
• SCCM / Microsoft Configuration Manager
• Jamf Pro
• ServiceNow
• NexThink
• Katalon
• Plutora

Equivalent enterprise patching, endpoint-management, vulnerability-management, testing, and workflow platforms should also be considered

Key Skills

Education

Bachelor's degree