Job Description:
Job Title: Senior Director, Technical Vulnerability Management & Remediation Orchestration
Reporting to: SVP, Infrastructure & Enterprise Technology
Location : NYC
Hybrid : 3 days + a week in office
Pat Range: $220,000 - $250,000 + Bonus
Overview
The Senior Director of Technical Vulnerability Management (VM) & Remediation Orchestration is the global operational leader responsible for defining, driving, and scaling News Corp’s enterprise vulnerability remediation strategy. Reporting directly to the SVP, Infrastructure & Enterprise Technology, you will lead the central Vulnerability Remediation Services function, serving as the connective operational bridge between Enterprise Cyber Security, Technology Operations / Service Management, Infrastructure, and Business Unit (BU) leadership—including platform owners across Dow Jones, HarperCollins, Realtor.com, News Corp Australia, News UK, New York Post, News Corp HQ, and Global Technology.
In this role, you will strategically partner with Cyber Security (owners of core VM scanning tools and policy) and Tech Ops / Service Delivery (owners of the CMDB and asset topology) to ingest and leverage up-to-date, normalized risk data enabling presentation to platform owners.
Your core mandate is to leverage and mature existing reporting and ticket orchestration, driving remediation and compliance through defined Continuous Threat Exposure Management (CTEM) frameworks, ensure SLA compliance, and facilitate cadence-based reporting with Global Tech and business partners.
Key Responsibilities
Strategic Leadership, Governance and Cross-Functional Partnerships
● Establish and execute a unified, global vulnerability remediation management strategy spanning cloud (AWS, Azure, GCP), infrastructure, applications, containerized workloads, and edge systems, leveraging Continuous Threat Exposure Management (CTEM) principles to systematically scope, discover, prioritize, validate, and mobilize remediation.
● Define and maintain enterprise-wide VM remediation processes, and associated SLAs tailored to asset criticality and business context.
● Partner with BU executives, engineering heads, and IT Directors to align VM remediation policies and findings against operational constraints and product roadmaps.
● Act as primary operational partner with defined BU VM Champions and technical leads, providing actionable insights and highlighting bottlenecks in meeting remediation SLAs
● Partner with Cyber Security leads to continuously evaluate scanning coverage (SAST/DAST/SCA, CSPM, EASM) to ensure vulnerability detection feeds align with evolving threat models, policy requirements, and vendor consolidation strategy to maximize ROI.
Remediation Orchestration & Enterprise Coordination
● Establish and govern standardized global vulnerability remediation workflows, patch windows, maintenance schedules and remediation cadences across all critical infrastructure and application tiers, driving consistent accountability across global BUs.
● Establish and maintain an enterprise Responsibility Matrix (RACI) clearly defining ownership and handoffs between centralized vulnerability management, cyber security functions, shared infrastructure services and BU-managed platforms.
● Partner with BU engineering and operations leadership to define, document and operationalize localized patch regimens and asset lifecycle management plans, including roadmaps for legacy End-of-Life (EOL) and Out-of-Service-Life technologies.
● Design, implement and maintain automated remediation workflows in Jira /ServiceNow, translating normalized findings from defined scanning tools into clear, prioritized actionable items assigned to system and application owners.
● Lead global cross-BU governance meetings and vulnerability steering committees to track outstanding issues, resolve resource bottlenecks and drive continuous alignment.
● Establish formal risk-acceptance and escalation governance pathways for unresolved risks, aged…