IT Security Vulnerability Manager

$105,000 - $120,000/Yr

Evoke Research And Cons - Washington, DC

Full-time - Mid Level

Washington, DC

About the position

Evoke Consulting is seeking an IT Security Vulnerability Manager to oversee the identification, assessment, and prioritization of vulnerabilities across IT systems. This role involves ensuring timely remediation through collaboration with internal teams and government security teams, while also acting as a liaison to facilitate communication and alignment on security objectives. The position requires maintaining detailed records of vulnerability assessments and compliance with industry standards and government policies.

Responsibilities

• Identify, assess and prioritize vulnerabilities across IT systems.
• Ensure timely remediation through coordination with internal teams and government security team.
• Work closely with technical teams to implement and validate remediation actions, ensuring compliance with industry standards and government policies.
• Act as a primary liaison between our team and government team, facilitating communications and maintaining alignment on security objectives and requirements.
• Prepare and present comprehensive weekly progress reports, detailing the status of vulnerabilities, ongoing remediation efforts, and risk assessment.
• Maintain detailed records of vulnerability assessments, remediation plans and resolutions.
• Ensure adherence to compliance requirements and support audit activities as needed.
• Identify and recommend improvements to vulnerability management processes, tools, and technologies to strengthen our security posture.

Requirements

• Bachelor's degree in information technology, Cybersecurity or related fields.
• Minimum of 5 years of experience in IT security, with a focus on vulnerability management and remediation.
• Strong understanding of security frameworks and compliance standards (e.g., NIST, ISO, CIS).
• Experience working with government agencies is highly desirable.
• Proficiency in using vulnerability scanning tools and security information and event management (SIEM) systems.
• Excellent communication skills, with the ability to produce clear and concise reports.

Nice-to-haves

• Certified Information Systems Security Professional (CISSP) (desired).
• Certified Information Security Manager (CISM) (desired).
• Certified Ethical Hacker (CEH) (desired).

Benefits

• 401(k) matching
• Bereavement leave
• Dental insurance
• Disability insurance
• Flexible spending account
• Health insurance
• Health savings account
• Paid time off (PTO) program
• Eleven (11) paid holidays
• Parental leave
• Volunteer hours