What are the responsibilities and job description for the Vulnerability Management Team Lead – Vice President position at CREDIT AGRICOLE ASSURANCES?
Nous rejoindre, c’est intégrer un groupe multi-expert, solide et proche de ses clients, 1er bancassureur en Europe et 1er assureur en France.
Nous sommes implantés dans 9 pays et comptons 5 800 collaborateurs dans le monde pour répondre aux besoins en protection et en épargne de nos clients. Nous les accompagnons à travers nos quatre grands métiers en :
- Epargne et retraite
- Prévoyance, emprunteur et assurances collectives
- Assurances dommages
- Santé et territoires
Le groupe Crédit Agricole Assurances s’est construit autour de la volonté d’être un assureur complet, diversifié et international au service de ses partenaires, notamment les Caisses régionales de Crédit Agricole et LCL .
NOTRE ENGAGEMENT RH
Pour favoriser l’épanouissement professionnel de nos collaborateurs, nous nous engageons chaque jour en faveur de leur bien-être. Pour cela, nous attachons une attention particulière aux nouveaux modes de travail et de management ainsi qu’à la qualité de vie au travail.
Convaincus que la Diversité est une source d'enrichissement pour tous, nous sommes engagés en faveur de l'inclusion. Nos postes sont ouverts à toutes et tous, quels que soient les handicaps ou les singularités de chacun.
Consultez nos offres et découvrez les avantages à nous rejoindre : télétravail, engagement sociétal, dispositif de rémunération…
Visitez notre page recruteur
SummaryThe Head of Vulnerability Management will lead the enterprise-wide vulnerability detection, assessment, and remediation efforts to safeguard the bank’s infrastructure, applications, and data. This role will develop and execute a risk-based vulnerability management program that aligns with regulatory requirements and industry best practices. The ideal candidate will work cross-functionally to drive remediation efforts, enhance security posture, and provide executive-level reporting on vulnerabilities and risk exposure. This position requires a strong leader with deep technical expertise and experience in financial sector cybersecurity governance.Key ResponsibilitiesVulnerability Program Leadershipo Develop and manage the enterprise vulnerability management strategy, ensuring alignment with security frameworks and regulatory requirements.o Establish policies, procedures, and standards for vulnerability identification, assessment, and remediation.o Maintain executive-level reporting on vulnerability trends, risk posture, and remediation effectiveness.o Continuously evaluate and enhance program maturity through automation and process improvements.Vulnerability Scanning & Assessmento Manage enterprise-wide vulnerability scanning tools and processes to detect security weaknesses.o Perform regular scanning and testing across infrastructure, applications, and cloud environments.o Analyze scan results to prioritize vulnerabilities based on risk, exploitability, and regulatory impact.o Ensure comprehensive coverage of all assets through asset discovery and inventory validation.Remediation & Risk Mitigationo Collaborate with IT, DevOps, and application teams to ensure timely remediation of identified vulnerabilities.o Develop and track key performance indicators (KPIs) to measure remediation effectiveness.o Provide guidance on compensating controls and risk acceptance when remediation is not immediately feasible.o Establish escalation processes for high-risk vulnerabilities requiring urgent action.Threat Intelligence & Vulnerability Prioritizationo Integrate threat intelligence feeds to correlate vulnerabilities with real-world threats and exploits.o Align vulnerability management efforts with emerging threats, zero-day vulnerabilities, and adversarial tactics.o Leverage frameworks such as MITRE ATT&CK to enhance risk-based prioritization.o Coordinate with incident response teams to analyze vulnerabilities exploited in security incidents.Compliance & Regulatory Alignmento Ensure adherence to financial industry regulations, including FFIEC, and NYDFS.o Support internal and external audits by providing evidence of vulnerability management controls.o Maintain documentation of vulnerability management activities for compliance reporting.o Align remediation efforts with compliance deadlines and security control objectives.Core CompetenciesExperience & Expertiseo 7 years of experience in cybersecurity, with at least 3 years in vulnerability management or related roles.o Strong knowledge of vulnerability assessment methodologies, risk frameworks (NIST, CIS, ISO 27001), and regulatory compliance in banking.o Hands-on experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, or similar.o Familiarity with penetration testing, threat intelligence, and exploit development concepts.o Experience working in highly regulated environments with strict security and compliance requirements.Technical Skillso Proficiency in security automation using scripting languages (Python, PowerShell, Bash).o Strong understanding of network security, cloud security (AWS, Azure, GCP), and secure application development practices.o Knowledge of patch management processes and security hardening guidelines.o Ability to analyze vulnerabilities, assess risk, and communicate technical findings to business leaders.Soft Skills & LeadershipStrong leadership and project management skills, with experience leading vulnerability remediation efforts.Excellent communication and stakeholder management skills, with the ability to influence technical and non-technical teams.Analytical mindset with a proactive approach to problem-solving and risk mitigation.Ability to thrive in a fast-paced, high-stakes environment with competing priorities.
