Senior Director of Vulnerability Management

Job Summary

Leading the enterprise vulnerability management program, the full-time Senior Director of Vulnerability Management will set technical strategies, oversee teams, and drive accountability for security weaknesses across Lilly's technology landscape in a remote environment.

Key responsibilities:

• Set and own the technical strategy, architecture, and operating model for end-to-end enterprise vulnerability management
• Lead and develop leaders and teams across vulnerability management, application security, and offensive security
• Establish risk-based prioritization standards and remediation SLAs, ensuring accountability among technology owners

Required qualifications:

• 10+ years of hands-on experience in cybersecurity, primarily in vulnerability management or security operations
• 5+ years of experience leading a security function, including managing other leaders
• Strong familiarity with application security practices and integration into vulnerability management
• Experience establishing remediation SLAs and accountability models that improve outcomes
• Hands-on experience with security tooling, automation, and data pipelines