Vulnerability Program Manager (Remote)

Businessolver • Denver, CO

7d • $92,000 - $144,000 • Remote

About The Position

Since 1998, Businessolver has delivered market-changing benefits technology and services supported by an intrinsic responsiveness to client needs. The company creates client programs that maximize benefits program investment, minimize risk exposure, and engage employees with easy-to-use solutions and communication tools to assist them in making wise and cost-efficient benefits selections. Founded by HR professionals, Businessolver's unwavering service-oriented culture and secure SaaS platform provide measurable success in its mission to provide complete client delight. At Businessolver you have opportunities for individual development through our common language: Respond Readily. Trust through transparency. Assume positive intent. Be real. Live a growth attitude. Embrace the reverse golden rule. The Vulnerability Program Manager is responsible for developing, implementing, and managing the organization’s vulnerability management program. This role ensures timely identification, assessment, prioritization, and remediation of security vulnerabilities across enterprise systems, applications, and infrastructure. The position collaborates with cross-functional teams to drive continuous improvement in the organization’s security posture and compliance with regulatory requirements.

Requirements

• Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience).
• 5+ years of experience in information security, with at least 2 years dedicated to vulnerability management.
• Proficiency with industry-standard vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7) and remediation tracking platforms.
• Must be able to configure, schedule, and interpret scan results, and oversee the lifecycle of vulnerability remediation.
• Demonstrated expertise in applying security frameworks and industry standards such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, and PCI DSS.
• Experience implementing and maintaining controls in accordance with regulatory requirements and industry benchmarks.
• Familiarity with vulnerability management best practices, including risk prioritization, patch management processes, threat intelligence integration, and continuous improvement methodologies.
• Ability to design and refine processes for vulnerability identification, assessment, and mitigation across enterprise environments.
• Excellent communication, analytical, and project management skills.
• Proven ability to clearly articulate technical risk and remediation strategies to both technical and non-technical audiences, including executives and cross-functional teams.
• Experience collaborating with cross-functional teams (e.g., IT, DevOps, Application Development, Compliance, and Legal) to ensure coordinated vulnerability management efforts.
• Ability to lead meetings, drive consensus, and facilitate information sharing to maintain compliance with internal and external requirements.
• Demonstrated responsibility for monitoring, maintaining, and reporting on vulnerability management metrics and compliance status.
• Must proactively engage stakeholders to ensure ongoing adherence to organizational policies, standards, and regulatory obligations.

Nice To Haves

• Relevant certifications preferred, such as CISSP, CISM, OSCP, GIAC, or equivalent credentials that validate proficiency in security practices and vulnerability management.

Responsibilities

• Lead the design, implementation, and continuous improvement of the enterprise vulnerability management program.
• Oversee vulnerability scanning, assessment, and reporting processes for all critical assets.
• Collaborate with IT, DevOps, and application teams to prioritize and track remediation efforts.
• Develop and deliver metrics, dashboards, and executive reports on vulnerability status and risk trends.
• Ensure compliance with internal policies, industry standards, and regulatory requirements related to vulnerability management.
• Coordinate vulnerability disclosure and response activities, including communication with external vendors and stakeholders.
• Provide guidance, training, and awareness to technical teams on vulnerability management best practices.
• Performs other duties as assigned.
• Comply with all policies and standards.

Benefits

• If this position is full-time or part-time benefit eligible, you will receive a comprehensive benefits package which can be viewed here: https://businessolver.foleon.com/bsc/job-board-businessolver-virtual-benefits-guide/
• This role is eligible to participate in the annual bonus incentive plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level