Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Director, Technical Vulnerability Management & Remediation Orchestration role.

Rezi rewrites your resume against News Corp's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Director, Technical Vulnerability Management & Remediation Orchestration posting at News Corp — free, in seconds.

About the Role

The Senior Director of Technical Vulnerability Management (VM) & Remediation Orchestration is the global operational leader responsible for defining, driving, and scaling News Corp’s enterprise vulnerability remediation strategy. This role serves as the connective operational bridge between Enterprise Cyber Security, Technology Operations / Service Management, Infrastructure, and Business Unit (BU) leadership.

Responsibilities

Establish and execute a unified, global vulnerability remediation management strategy spanning cloud, infrastructure, applications, containerized workloads, and edge systems, leveraging Continuous Threat Exposure Management (CTEM) principles.
Define and maintain enterprise-wide VM remediation processes, and associated SLAs tailored to asset criticality and business context.
Partner with BU executives, engineering heads, and IT Directors to align VM remediation policies and findings against operational constraints and product roadmaps.
Act as primary operational partner with defined BU VM Champions and technical leads, providing actionable insights and highlighting bottlenecks in meeting remediation SLAs.
Partner with Cyber Security leads to continuously evaluate scanning coverage to ensure vulnerability detection feeds align with evolving threat models, policy requirements, and vendor consolidation strategy.
Establish and govern standardized global vulnerability remediation workflows, patch windows, maintenance schedules and remediation cadences across all critical infrastructure and application tiers.
Establish and maintain an enterprise Responsibility Matrix (RACI) clearly defining ownership and handoffs.
Partner with BU engineering and operations leadership to define, document and operationalize localized patch regimens and asset lifecycle management plans.
Design, implement and maintain automated remediation workflows in Jira /ServiceNow, translating normalized findings into clear, prioritized actionable items.
Lead global cross-BU governance meetings and vulnerability steering committees to track outstanding issues, resolve resource bottlenecks and drive continuous alignment.
Establish formal risk-acceptance and escalation governance pathways for unresolved risks, aged vulnerabilities, and exceptions.
Partner with the Cyber Security function to ensure appropriate tooling is in place for the evaluation, implementation, and management of modern vulnerability identification tools.
Shift from reactive patching to risk-based vulnerability management (RBVM) and exposure validation, utilizing threat intelligence, exploitability data, and business impact to prioritize remediation efforts.
Coordinate with platform owners to monitor vendor security advisories, CVEs, product updates and EOL notifications alongside Cyber Security scanning.
Coordinate vendor architectural reviews with platform owners to identify security misconfigurations, architectural weaknesses and design vulnerabilities.
Drive the use of automation and AI across VM, improving asset identification, CMDB accuracy, scanning, remediation and reporting.
Evaluate, consolidate, and rationalize vendor security tooling and platforms across BUs to reduce operational complexity, ensure architectural consistency, and maximize return on security investments (ROI).
Lead root-cause analysis of recurring systemic vulnerabilities, championing DevSecOps principles and embedding automated security gates and shift-left controls within CI/CD pipelines.
Define and monitor VM KPIs and KRIs, delivering measurable 6–12 month performance improvements.
Develop global and BU VM risk dashboards and executive reporting for the CISO, CTO, Risk Committee and Board.

Requirements

10+ years in Information Technology with heavy involvement across Security, IT Risk or Cybersecurity operations.
5+ years in a global leadership or Senior Director-level role managing enterprise vulnerability programs.
Deep expertise in enterprise VM, remediation orchestration, patch management, risk-based prioritisation and vulnerability detection across complex IT and cloud environments.
Proven ability to influence engineering, DevOps, technology and business teams in a global matrixed organisation without direct line authority.
Exceptional ability to translate complex technical risks into clear, business-focused insights for senior executives and Board-level stakeholders.
Strong understanding of modern VM, security and orchestration technologies, including platforms such as Qualys, Tenable, Wiz, Snyk, Defender for Cloud, Jira and ServiceNow.
Bachelor’s degree in Computer Science, Information Technology or related field.
Relevant certifications such as CISSP, CISM or CRISC highly desirable.

Skills

Vulnerability Management
Remediation Orchestration
Patch Management
Risk-Based Prioritization
Vulnerability Detection
Continuous Threat Exposure Management (CTEM)
Cloud Security (AWS, Azure, GCP)
SAST/DAST/SCA
CSPM
EASM
Jira
ServiceNow
DevSecOps
CI/CD pipelines
Qualys
Tenable
Wiz
Snyk
Defender for Cloud

Location

Work Type

Hybrid

Experience Level

Senior Director
10+ years
5+ years

Education Level

Bachelor's degree in Computer Science, Information Technology or related field

Salary/Compensations

$220,000 - $250,000 + Bonus

Benefits

Comprehensive and competitive benefits package covering health, retirement, wellbeing, and more.
Optional benefits to meet the diverse needs of our employees.

About the Company

News Corp is a global, diversified media and information services company.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status or any other protected characteristic under applicable law. EEO/Disabled/Vets
We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application and/or interview process.