The Vulnerability Management Lead is responsible for the AMER region’s vulnerability management and configuration management program. The ideal candidate will be able to demonstrate practical and in-depth knowledge of running an effective vulnerability & / or configuration management program including dynamically responding to emerging threats in the financial services industry.
The Vulnerability Management Lead is responsible for the AMER region’s vulnerability management and configuration management program. The ideal candidate will be able to demonstrate practical and in-depth knowledge of running an effective vulnerability & / or configuration management program including dynamically responding to emerging threats in the financial services industry.
The role also calls for strong technical analysis and process improvement skills and the ability to present to senior management on the state of, and proposals to improve, the program.
Working knowledge of cybersecurity and risk assessment frameworks (e.g., The Vulnerability Management Lead is a member of the Cyber Threat Defense (CTD) team within the AMER Data and Cyber Security (ISR) department and reports to the Director of CTD. Vulnerability & Configuration Management
Lead the AMER vulnerability & configuration management programs – Act as the main point of contact and expert in Vulnerability Management and configuration management; including overseeing the risk of zero-day vulnerabilities, oversee patching/remediation and risk acceptance of vulnerabilities where appropriate.
Oversee the discovery, evaluation, and implementation of vulnerability scanning, patch and configuration review, penetration testing.




Present operating and steering committees for projects to senior management on a quarterly basis.
Develop and manage detailed vulnerability reviews and assessments, and patching and configuration reviews: (1) Assess potential damage of security flaws and assist in the implementation of corrective actions; (Review and sign-off on all recommendations on possible improvements resulting from the work performed as part of projects.
Draft and publish communications for management as new threats emerge.
Improve the reporting framework that will provide regular metrics and statistics about our business and IT environment; analyze trends in security events, activities, etc. to better understand risks, insufficiencies in our solutions, staffing shortages, etc.; report security metrics and statistics to the CISO and other key stakeholders such as the COO, CIO, and CTO.

LANGUAGE:

Ability to communicate in English, both orally and in writing, is a requirement as the person in this position will need to collaborate regularly with colleagues and partners in the United States.
This way, we maximize our ability to serve client needs and anticipate market changes. Societe Generale is committed to strengthening bonds with colleagues, communities, and the world in which we live, because relationships are at the heart of how we operate. Our Diversity & Inclusion Mission: Recruit, develop, advance, and retain a diverse workforce that is united in our efforts to enhance our competitive position and deliver cutting-edge solutions to our clients.
Our Diversity & Inclusion Vision:
Engaged workforce that is demographically diverse in a way that reflects the communities in which we operate
Engage our community and marketplace, and position the organization to meet the needs of all its clients

📌 Chief Information Security Officer H/F (IT) (Montreal)
🏢 Société Générale
📍 Montreal