Sr Manager, IT - Threat & Vulnerability Management

**Job Description** ------------------- Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits\* and perks, including medical, dental and vision coverage, 7% 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, an industry-leading total rewards package that emphasizes a high discretionary bonus. \*Benefits begin 30 days after hire for hourly employees, and immediately upon hire for salaried employees. Get a peek into life here at Kraft Heinz through our Instagram and TikTok channels! **Senior Manager, IT – Threat and Vulnerability Management at a Glance….** -------------------------------------------------------------------------- The Senior Manager, IT – Threat and Vulnerability Management leads a critical function responsible for the strategy, management and transformation of Kraft Heinz’s threat and vulnerability management program. Focused on resilience and protecting the global enterprise from cybersecurity threats, we run an advanced program that delivers systematic testing, identification, analysis and remediation of vulnerabilities across the business worldwide. To support the rapid growth of this program, we are looking for an experienced, strategic and highly organized TVM champion who will set the program’s direction, partner with senior leadership and remediation owners across the enterprise, and drive operational excellence and continuous advancement across processes and technology. The ideal candidate will have strategic experience with a technical background in Threat & Vulnerability management. This is a hybrid role requiring 3 days onsite weekly at our offices in Toronto. **What’s on the menu?** ----------------------- * Lead the enterprise Vulnerability Management function, setting and executing strategy, priorities and a program maturity roadmap in partnership with group leader, senior leadership, and cross-functional remediation owners. * Assess program maturity and continuously strengthen capabilities to identify, detect and remediate vulnerabilities across workstations, infrastructure, cloud and on-prem servers. * Drive risk-based prioritization that weighs severity, exploitability, threat intelligence, asset criticality and exposure, translating findings into measurable risk and risk reduction. * Lead vulnerability identification, validation, reporting and tracking from identification through verified closure, and own the zero-day response process from impact assessment and mitigation to leadership communication. * Partner with business-wide remediation groups, internal and third-party, to agree on priorities and timelines, resolving conflicts between security needs and business priorities. * Manage the managed security service provider (MSSP) supporting threat and vulnerability manag