The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:Regular
Language Fluency: English (Required)
Work Shift:1st shift (United States of America)
Please review the following job description:Leads enterprise vulnerability and patch management activities that reduce technology risk and improve security posture across infrastructure and application environments. Applies knowledge of vulnerability management principles, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve overall security outcomes. Works independently with significant latitude for decision-making and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders.
ESSENTIAL DUTIES AND RESPONSIBILITIESFollowing is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
1. Lead enterprise patch and vulnerability management efforts by driving the identification, prioritization, remediation, and reporting of infrastructure and application security vulnerabilities across technology environments.
2. Partner with infrastructure, application, cloud, database, network, and platform teams to coordinate timely remediation of vulnerabilities and ensure compliance with established service level agreements (SLAs) and security standards.
3. Facilitate vulnerability governance processes, including risk reviews, remediation tracking, exception management, escalation activities, and executive reporting.
4. Monitor and report on patch deployment activities, vulnerability remediation progress, aging risk, exception requests, and compliance metrics to support operational and regulatory requirements.
5. Develop and maintain dashboards, metrics, key performance indicators (KPIs), and management reporting to measure vulnerability management program effectiveness and remediation performance.
6. Collaborate with Cyber Security, Risk Management, Audit, Compliance, Technology Operations, and application teams to support examinations, control testing, audit requests, and regulatory inquiries.
7. Identify opportunities to improve remediation efficiency through automation, workflow enhancements, system integrations, and process standardization.
8. Review and validate remediation evidence, vulnerability closure activities, and patch deployment records to ensure accuracy and audit readiness.
9. Serve as a subject matter expert for vulnerability management and patch governance processes, providing guidance and direction to technology teams and leadership.
10. Lead cross-functional remediation initiatives involving high-risk vulnerabilities, critical security findings, emerging threats, and technology defect management efforts.
11. Maintain knowledge of industry security frameworks, vulnerability management best practices, regulatory expectations, and emerging cybersecurity threats to enhance program effectiveness.
QualificationsRequired QualificationsThe requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor's degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 5 years of professional experience in infrastructure engineering.
3. Strong knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.
Preferred Qualifications- Strong understanding of ServiceNow Vulnerability Response (VR), including vulnerability data management, remediation tracking, SLA performance monitoring, and operational reporting.
- Experience developing and maintaining ServiceNow Vulnerability Response dashboards, reports, and scorecards to monitor remediation progress, aging vulnerabilities, compliance trends, and risk exposure.
- Ability to analyze and translate vulnerability data into actionable metrics and reporting for technology teams, cybersecurity stakeholders, and management.
- 3+ years of experience in patch management, vulnerability management, infrastructure engineering, cybersecurity operations, or related technology disciplines.
- Experience using enterprise vulnerability management platforms such as Qualys, Rapid7, Wiz, or similar tools.
- Understanding of vulnerability remediation lifecycle management, risk prioritization methodologies, and service level agreement (SLA) tracking.
- Experience analyzing vulnerability scan results, security findings, and remediation plans.
- Experience supporting audit, compliance, risk management, or control testing activities.
- Familiarity with ITSM and workflow platforms such as ServiceNow.
- Knowledge of change management, release management, and technology governance processes.
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist's generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist's defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.EEO is the Law E-Verify IER Right to Work
