Information Security Manager 3 - Vulnerability Inventory

Role Level: Information Security Manager 3 – (Vulnerability Inventory)

Work Type: Long term Contract

Location: 100% Remote

Overview

The Texas Education Agency (TEA) is seeking an experienced Information Security Manager 3 to lead vulnerability management and remediation coordination efforts. This role is responsible for overseeing the full lifecycle of vulnerability identification, prioritization, remediation, and reporting, ensuring alignment with NIST standards and agency security policies.

All deliverables will be considered “work made for hire” and remain the property of TEA. Candidates may be subject to background checks per Texas law.

Key Responsibilities

1. Vulnerability Inventory & Baseline Management

• Review existing vulnerability data from scans, assessments, and security tools
• Establish and maintain a consolidated vulnerability baseline
• Develop and document remediation timelines based on risk and aging

2. Risk Classification & Prioritization

• Classify vulnerabilities based on severity, exploitability, and business impact
• Align prioritization with NIST guidelines

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Ensure remediation timelines meet agency-defined SLAs

3. Remediation Coordination

• Collaborate with system, server, and application owners
• Communicate remediation expectations, risks, and deadlines
• Track progress and identify blockers or dependencies
• Escalate critical or overdue vulnerabilities to governance bodies

4. Tracking, Metrics & Reporting

• Maintain accurate tracking of remediation activities
• Generate regular status reports highlighting progress, risks, and gaps

5. Validation & Closure

• Validate remediation through scan results and supporting evidence
• Confirm closure in tracking systems
• Document exceptions or risk acceptances per policy

6. Program Improvement

• Identify gaps or inefficiencies in remediation processes
• Recommend improvements aligned with NIST and agency governance

Required Qualifications

• Minimum 8 years of experience in:
• Vulnerability inventory and baseline management
• Risk classification and prioritization
• Vulnerability remediation tracking
• Status reporting and metrics
• Validation of remediation using scan data and evidence

Work Schedule & Conditions

• Standard hours: Monday–Friday, 8:00 AM – 5:00 PM (excluding state holidays)
• Occasional after-hours or weekend work may be required with prior approval
• Overtime (over 40 hours/week) must be pre-approved and will be paid at the standard hourly rate