Job Title:  Senior Manager Vulnerability Management

What You Need To Know

Shape a remarkable future with us. Build a career working for an industry leader that truly invests in their people – and equips them with leading technology, continuous learning, and the ability to bring their best selves to work. As the premier wine and spirits distributor, Southern Glazer’s isn't just one of Forbes’ Top Private Companies; it's a family-owned business with deep roots dating back to 1933.

The reputation of Southern Glazer’s is well-established, and it's no surprise that we are regularly recognized for our culture. Southern Glazer’s has been recognized by Newsweek as one of America’s Greatest Workplaces for Inclusion and Diversity, as well as for Women and Parents and Families. These accolades speak volumes about our commitment to creating a supportive and inclusive culture of belonging for all employees.

As a full-time employee, you can choose from a wide-ranging menu of our Top Shelf Benefits, including comprehensive medical and prescription drug coverage, dental and vision plans, tax-saving Flexible Spending Accounts, disability coverage, life insurance plans, and a 401(k) plan. We also offer tuition assistance, a wellness program, parental leave, vacation accrual, paid sick leave, and more.

By joining Southern Glazer’s, you would be part of a team that values excellence, innovation, and community. This is more than just a job – it's an opportunity to build the future of beverage distribution and grow with a company that truly cares about its people.

Overview

The Sr. Manager, Vulnerability Management leads the enterprise Vulnerability Management function and is accountable for advancing a risk-based program that identifies, prioritizes, validates, and reduces cybersecurity exposure across enterprise and OT environments. This role provides people leadership, program governance, executive reporting, and cross-functional influence to drive remediation accountability with technology teams, vendors, and business stakeholders. This role is expected to translate vulnerability exposure into business risk, guide prioritization decisions based on threat and asset context, and mature the program through continuous improvement, automation, governance, and measurable risk reduction.

Primary Responsibilities

• Lead the enterprise vulnerability management program by defining strategy, roadmaps, governance, and a risk-based exposure management operating model aligned with organizational cybersecurity and risk objectives.
• Drive accountability for vulnerability identification, prioritization, remediation, exception management, risk acceptance, escalation, and validation processes across the enterprise.
• Establish and maintain vulnerability management policies, standards, metrics, and service level objectives (SLOs/SLAs), ensuring compliance with internal security requirements and industry best practices.
• Partners with technology teams, business stakeholders, and third-party vendors to coordinate remediation efforts, reduce cyber risk, and strengthen enterprise security governance.
• Develop executive reporting, dashboards, metrics, and risk insights that communicate vulnerability exposure, remediation progress, program effectiveness, emerging threats, and business impact to support strategic decision-making.
• Lead the evaluation, implementation, and optimization of vulnerability management, threat detection, continuous monitoring, and automation capabilities to improve operational efficiency and program maturity.
• Serve as a senior vulnerability management leader, advising on risk-based decision making, program maturity, remediation governance, and emerging threat exposure.
• Manage cross-functional security initiatives and operational projects, ensuring successful delivery of program objectives, resource alignment, and stakeholder engagement.
• Build, develop, and lead a high-performing team through recruiting, coaching, mentoring, performance management, succession planning, and ongoing professional development.
• Establish team objectives, operational priorities, workforce plans, and long-term strategies that enable the vulnerability management program to scale with business growth and evolving security requirements.
• Manage program budgets, vendor relationships, and strategic partnerships to maximize the effectiveness and value of vulnerability management investments.
• Support major incident response and operational readiness by providing vulnerability intelligence, exposure context, remediation guidance, and leadership support as required.
• Advance a risk-based exposure management program by leveraging threat intelligence, asset criticality, business impact, and exploitability data to prioritize remediation and reduce enterprise cyber risk.

Preferred Qualifications

• Master’s Degree 
• Active CISSP or other relevant security-related certification
• Scripting and/or programming skills to support automation, analysis, or process improvement.

Minimum Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, or equivalent combination of education and work experience.
• Minimum 10–12 years of experience in cybersecurity, vulnerability management, infrastructure, cloud, OT, or related technology environments, including at least 5 years leading vulnerability management, exposure management, patch governance, or cyber risk reduction programs and at least
• 3 years of direct people leadership experience managing and developing Information Technology or Information Security professionals.
• Ability to develop and execute strategic initiatives, align security programs with business objectives, and lead organizational change.
• Strong analytical, critical-thinking, problem-solving, and decision-making skills, with the ability to assess risk and drive effective outcomes.
• Strong ability to assess and communicate cyber risk through governance, metrics, executive reporting, and vulnerability management practices that drive remediation accountability, informed decision-making, and continuous program maturity.
• Proven business acumen with experience managing priorities, budgets, resources, and competing organizational demands.
• Demonstrated ability to lead cross-functional programs and projects, including tracking progress, managing risks and dependencies, and driving successful delivery of objectives.
• Ability to influence remediation outcomes across teams that do not directly report into the vulnerability management function.
• Experience leading the use, integration, and optimization of vulnerability management platforms and related security technologies to improve prioritization, remediation workflow, reporting, and program maturity
• Ability to build strong teams through mentorship, talent development, knowledge sharing, and effective communication.

Physical Demands

• Physical demands include a considerable amount of time sitting and typing/keyboarding, using a computer (e.g., keyboard, mouse, and monitor), or adding machine
• Physical demands with activity or condition may include walking, bending, reaching, standing, squatting, and stooping
• May require occasional lifting/lowering, pushing, carrying, or pulling up to 20lbs

EEO Statement

Southern Glazer's Wine and Spirits, an Affirmative Action/EEO employer, prohibits discrimination and harassment of any type and provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. SGWS complies with all federal, state and local laws concerning consideration of a qualified applicant's arrest and/or criminal conviction records. Southern Glazer's Wine and Spirits provides competitive compensation based on estimated performance level consistent with the past relevant experience, knowledge, skills, abilities and education of employees. Unless otherwise expressly stated, any pay ranges posted here are estimates from outside of Southern Glazer's Wine and Spirits and do not reflect Southern Glazer's pay bands or ranges.

If you have any questions or concerns about whether this posting complies/adheres with local pay transparency requirements, please contact the SGWS talent acquisition team at NationalTA@sgws.com