Senior Specialist

Role Summary: VM Product Owner (Service Delivery Experience)

We are seeking a Vulnerability Management (VM) Product Owner with 8 to 12 years of experience in Product Management, Security Operations, or Vulnerability Management. The role will be responsible for defining and driving the VM platform roadmap, translating vulnerability risk and scan data into prioritized product initiatives, and delivering governed VM capabilities through ServiceNow. The individual will work closely with Information Security, Engineering, and Platform teams to improve patch compliance, remediation effectiveness, and overall security posture.

Key Responsibilities

• Own and drive the Vulnerability Management platform roadmap.
• Convert vulnerability scan findings and risk priorities into a prioritized product backlog.
• Collaborate with InfoSec, Engineering, and Platform teams to deliver VM capabilities and enhancements.
• Manage ServiceNow Vulnerability Response (VR) / SecOps initiatives and governance.
• Define, monitor, and report on key VM metrics.
• Drive improvements in patch compliance and Mean Time to Remediate (MTTR).
• Align security requirements with product priorities and business objectives.
• Ensure effective stakeholder communication and cross-functional coordination.

Mandatory Skills

• 8 to 12 years of experience in Product Management, Vulnerability Management, or IT Security Operations.
• Strong understanding of Vulnerability Management lifecycle and remediation processes.
• Experience with vulnerability assessment tools such as:
• Qualys
• Tenable
• Rapid7
• ServiceNow VR/SecOps module experience preferred.
• Ability to translate security risks into product requirements and roadmap priorities.
• Experience managing product backlogs, governance, and stakeholder expectations.
• Strong analytical, reporting, and communication skills.

Preferred Skills

• Security operations and risk management knowledge.
• Experience defining security KPIs and operational metrics.
• ITIL process awareness.
• Exposure to enterprise-scale security programs.