Your Role And Responsibilities
The CISO Remediation Team is seeking a manager of security remediation to lead a team of cybersecurity Remediation Engineers. This role is responsible for driving the successful execution of remediation efforts across the IBM enterprise, ensuring security risks are addressed effectively, sustainably, and at scale.
The manager operates at the intersection of people leadership, technical oversight, and cross‑organizational coordination, partnering closely with Security Operations, Incident Response, Product, Infrastructure, and Architecture teams. The role balances technical depth with leadership, enabling engineers to execute remediation while aligning work to enterprise risk priorities.
This is not a SOC operations or detection leadership role. The focus is on post‑finding and post‑incident remediation, vulnerability reduction, and systemic security improvements.
Level, scope, and strategic responsibility will align with experience and band.
Preferred Education
Bachelor's Degree
Required Technical And Professional Expertise
- Demonstrated experience leading technical teams in security, infrastructure, cloud, or platform engineering.
- Strong understanding of vulnerability management, incident response lifecycles, and remediation practices.
- Ability to guide engineers through ambiguous, high‑pressure technical challenges.
- Proven ability to influence across organizations and drive outcomes without direct control.
- Strong communication skills, with the ability to translate technical issues into business and risk context.
- Experience operating in large, complex, federated enterprise environments.
Preferred Technical And Professional Experience
- Experience managing or leading security remediation, vulnerability management, or post‑incident response efforts.
- Background in one or more technical domains: cloud, networking, operating systems, automation, or security platforms.
- Experience working with Agile or product‑aligned engineering teams.
- Experience applying enterprise security frameworks and risk management practices to prioritize and guide remediation decisions (e.g., NIST CSF, NIST 800‑series).
- Certifications are a plus but not required (e.g., CISSP, CISM, cloud security certifications).
