Senior Manager, IT - Vulnerability & Attack Surface Management

Job Description
Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits* and perks, including medical, dental and vision coverage, 7% 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, an industry-leading total rewards package that emphasizes a high discretionary bonus.
*Benefits begin immediately upon hire for salaried employees.
Get a peek into life here at Kraft Heinz through our Instagram and TikTok channels!
Sr Vulnerability & Attack Surface Management Manager at a glance
The Senior Manager of the Vulnerability and Attack Surface Management is a critical technical leadership role within our Information Security team with end-to-end responsibility for strategy, overs ight and execution of the Kraft Heinz Vulnerability Management and Attack Surface Management capabilities.
What's on the menu?

• Continuously b uild and execute a strategic vision for the V ulnerability and A ttack S urface M anagement program and its capabilities in alignment with organization's I nformation S ecurity and I nformation T echnology programs, program goals and business objectives .

• Drive all efforts necessary to ensure timely identification, analysis, and remediation of vulnerabilities across all IT assets, including applications, servers, networks, and endpoints.

• Establish and maintain strong relationships with key stakeholders, including business capabilities, infrastructure, networking, application development, compliance, communications and other executive and non-executive leadership.

• Continuously monitor and evaluate emerging security threats, trends, and technologies for continuous analysis and improvement of the organization's vulnerability and attack surface management capabilities.

• Develop and implement processes for continuous attack surface monitoring and reduction, ensuring the organization's exposure to threats is continuously minimized and optimally protected .

• Oversee the configuration, operation, and maintenance of vulnerability testing and management platforms, attack surface management technologies, and other related tooling.

• Provide technical guidance and support for vulnerability assessments, penetration testing, and attack surface management activities.

Recipe for Success:

• I have experience in information security, with at least 5 years in a hands-on vulnerability management and/or attack surface management role.
• I understand the nature of vulnerabilities and weaknesses, and can articulate detection and remediation methods for vulnerabilities to technical and non-technical audiences .
• I have expert -level understanding of vulnerability and attack surface testing and management techniques, processes and platforms .
• I have significant experience in designing, building, testing, implementing and refining workflows of varying complexit y.
• I have s trong understanding of common security frameworks (e.g., NIST, CIS, ISO).
• I have p roven experience in leading and managing security teams, with a track record of developing and executing strategic initiatives.
• I have e xcellent communication, interpersonal, and leadership skills.

Please note: This job posting is just a preview of the full scope of the position. A comprehensive job description is shared upon interview.
We hope to find you a seat at our table!
Location(s)
Chicago/Aon Center
Kraft Heinz is an Equal Opportunity Employer that prohibits discrimination or harassment of any type. All qualified applicants are considered for employment without regard to race, color, national origin, age, sex, sexual orientation, gender, gender identity or expression, disability status, protected veteran status, or any other characteristic protected by law. Applicants who require an accommodation to participate in the job application or hiring process should contact [email protected] .