Information Security Manager - TVM

The Information Security Manager – TVM, will be part of ZS IT Information Security team in Princeton. As Information Security Manager, overseeing the Threat and Vulnerability Management team, you will design, build, and oversee a mature, global team. This team will be responsible for infrastructure and application vulnerability and threat analysis, as well as planning, prioritization, and remediation of discovered vulnerabilities. To help achieve these goals, you will be responsible for collaboration with multiple teams across ZS to coordinate and enforce mitigation efforts. In addition, you will be expected to stay up to date on technology and security trends and make recommendations to enhance the security posture of ZS infrastructure and applications. INFORMATION SECURITY MANAGER - TVM Responsibilities Review internal and external vulnerability scans, pen test results, threat intelligence, red team findings, and additional vulnerability inputs, prioritize remediation of discovered vulnerabilities, and coordinate mitigation efforts across all teams and systems Design repeatable processes for threat and vulnerability management and remediation Build, train and manage a team of analysts to operationalize defined vulnerability management processes Continually refine, automate, and improve vulnerability management processes Effectively report on vulnerability management efforts to executives and stakeholders Coordinate with respective teams to ensure timely update and configuration of software and operating systems with the latest patches and security settings to ensure the proper defenses are present Help define, review, and enact security policies and practices Stay apprised of the threat landscape, vulnerabilities, and industry best practices and make recommendations to improve ZS’s security posture Review and create SOPs & technical documents/runbooks to support team processes and ISMS requirements Train and educate team members to understand and use proper security practices Work closely with other information security teams to ensure operational efficiency and stay apprised of overall ZS security posture and capabilities Qualifications Bachelor's Degree in Information Security, Information Technology, or related field 9+ years of experience in Threat and Vulnerability Management or equivalent knowledge Strong knowledge in industry standard VAPT tools like Nessus, Rapid7 and open source tools Experience coordinating targeted exercises with third-party penetration testing teams GIAC Vulnerability Assessor or equivalent certification is desirable Knowledge of remediation methods for OWASP Top 10 vulnerabilities Demonstratable expertise and experience with security related incidents High level of knowledge of various security methodologies, processes, and technical security solutions Understanding and experience on working with cloud security services (AWS, Azure, GCP; others a plus) Must be a team leader, dedicated, and proactive Must possess excellent communication, problem-solving, critical thinking, and organizational skills Must have strong presentation skills Ability to clearly present technical approaches or findings in oral and written format Ability to present ideas in business-friendly and user-friendly language Highly self-motivated and directed Candidate should be flexible to work in late shifts to converse with leadership teams in US as needed ZS is a global consulting firm; fluency in English is required, additional fluency in at least one European or Asian language is desirable. Candidates must possess work authorization for their intended country of employment. An on-line application, including a cover letter expressing interest and a full set of transcripts (official or unofficial), is required to be considered. ZS offers a competitive compensation package with salary and bonus incentives, plus an attractive benefits package. NO AGENCY CALLS, PLEASE