Sr Manager, IT - Threat & Vulnerability Management

Job Description

Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits* and perks, including medical, dental and vision coverage, 7% 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, an industry-leading total rewards package that emphasizes a high discretionary bonus.  *Benefits begin 30 days after hire for hourly employees, and immediately upon hire for salaried employees.    Get a peek into life here at Kraft Heinz through our Instagram and TikTok channels!

Senior Manager, IT – Threat and Vulnerability Management at a Glance….

The Senior Manager, IT – Threat and Vulnerability Management leads a critical function responsible for the strategy, management and transformation of Kraft Heinz’s threat and vulnerability management program. Focused on resilience and protecting the global enterprise from cybersecurity threats, we run an advanced program that delivers systematic testing, identification, analysis and remediation of vulnerabilities across the business worldwide. To support the rapid growth of this program, we are looking for an experienced, strategic and highly organized TVM champion who will set the program’s direction, partner with senior leadership and remediation owners across the enterprise, and drive operational excellence and continuous advancement across processes and technology. The ideal candidate will have strategic experience with a technical background in Threat & Vulnerability management.

 

This is a hybrid role requiring 3 days onsite weekly at our offices in Toronto.

 

What’s on the menu?

• Lead the enterprise Vulnerability Management function, setting and executing strategy, priorities and a program maturity roadmap in partnership with group leader, senior leadership, and cross-functional remediation owners.

• Assess program maturity and continuously strengthen capabilities to identify, detect and remediate vulnerabilities across workstations, infrastructure, cloud and on-prem servers.

• Drive risk-based prioritization that weighs severity, exploitability, threat intelligence, asset criticality and exposure, translating findings into measurable risk and risk reduction.

• Lead vulnerability identification, validation, reporting and tracking from identification through verified closure, and own the zero-day response process from impact assessment and mitigation to leadership communication.

• Partner with business-wide remediation groups, internal and third-party, to agree on priorities and timelines, resolving conflicts between security needs and business priorities.

• Manage the managed security service provider (MSSP) supporting threat and vulnerability management and hold it and other vendors accountable to agreed service levels, quality and outcomes.

• Define, monitor and report metrics (coverage, SLA compliance, risk reduction, trends), and lead process improvement and automation to improve efficiency, performance and accuracy at scale.

• Build strong stakeholder relationships across global regions and business lines, communicate risk clearly to technical and executive audiences, and influence without direct authority, negotiating and escalating constructively to keep remediation commitments on track.

• Lead the MSSP team, driving documentation, cross-training and a collaborative, accountable culture; perform other related duties as assigned.

 

Recipe for Success – apply now if this sounds like you!

• Bachelor’s degree with 7+ years of relevant information security experience and 2-4 years strategic tvm program level experience.

• Deep expertise in vulnerability management tooling, including scanners, ServiceNow, Armis and unified vulnerability management platforms, and in designing and scaling the processes, metrics and reporting around them.

• Strategic thinking in setting program direction and roadmaps, and in tying vulnerability metrics to business risk and risk reduction, including utilizing automation, threat intel, exploitability, asset critical, environmental factors and unified vulnerability management approaches.

• Sound judgment in making fast, risk-based prioritization decisions, including under pressure during zero-day events.

• Skilled at influencing cross-functional and third-party remediation owners without direct authority, and at negotiating and escalating to keep commitments on track.

• Proven communicator who turns complex technical issues into clear, business-focused messages for executives and technical teams, with strong strategic leadership, and ownership skills.

Our Total Rewards philosophy is to provide a meaningful and flexible spectrum of programs that equitably support our diverse workforce and their families and complement Kraft Heinz’ strategy and values.

New Hire Base Salary Range:

$118,600.00 - $148,200.00

Bonus: This position is eligible for a performance-based bonus as provided by the plan terms and governing documents.

The compensation offered will take into account internal equity and may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors

Benefits: Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and saving for the future, we offer plans tailored to meet you and your family’s needs. Coverage for benefits will be in accordance with the terms and conditions of the applicable plans and associated governing plan documents.

Wellbeing: We offer events, resources, and learning opportunities that inspire a physical, social, emotional, and financial well-being lifestyle for our employees and their families.

You’ll be able to participate in a variety of benefits and wellbeing programs that may vary by role, country, region, union status, and other employment status factors, for example:

• Physical - Medical, Prescription Drug, Dental, Vision, Screenings/Assessments

• Social - Paid Time Off, Company Holidays, Leave of Absence, Flexible Work Arrangements, Recognition, Training

• Emotional – Employee Family Assistance Program, Wellbeing Programs, Family Support Programs

• Financial -Savings/Pension, Life, Accidental Death & Dismemberment, Disability, Discounted Perks

Location(s)

Toronto - Queen's Quay - Headquarters

Kraft Heinz is an Equal Opportunity Employer – Underrepresented Ethnic Minority Groups/Women/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity and other protected classes. In order to ensure reasonable accommodation for protected individuals, applicants that require accommodation in the job application process may contact [email protected] for assistance.