Trane Technologies Hiring for Sr. Manager Vulnerability Management Full Time

At Trane TechnologiesTM and through our businesses including Trane® and Thermo King®, we create innovative climate solutions for buildings, homes, and transportation that challenge what’s possible for a sustainable world. We’re a team that dares to look at the world’s challenges and see impactful possibilities. We believe in a better future when we uplift others and enable our people to thrive at work and at home. We boldly go.

The Senior Manager of Trane Technologies Vulnerability Management Program is a key leader within our digital risk team. This is an advanced technical management role, and candidates must possess a solid understanding of information security and preferably have held positions in cybersecurity and systems administration. The role also requires an understanding of business and governance process. They will work with our external partners to define the prioritization of remediation activities, optimize the remediation efforts in a risk-based approach, and govern vulnerability ing to drive actions by all levels of the organization.

The Senior Manager is expected to drive strategic initiatives both short and long term to identify and reduce the attack surface across applications and systems. Use of automated tools to identify, assess and is expected, with emphasis placed on effective communication to constituents relying on applications and systems that support their business. They take the initiative to inform, advise and partner with business units to help better secure their operations. This is a remote position.

Responsibilities:

• Vulnerability management program oversight supported by a strategic external partner.
• Oversee and support the continuous improvement of the vulnerability management program initiatives, process and technology integration, and technical assessment.
• Enhance technology and/or process to validate inventory of critical infrastructure and applications are in place. Vulnerability Assessment and Remediation
• Direct and/or perform on-going vulnerability assessments, penetration tests, and application and network security scans. Direct assessment efforts in a prioritized fashion, seeking breadth and depth of coverage where appropriate.
• Create s and present to executive management with factual documentation of issues identified and clear recommendation for mitigation of found vulnerabilities.
• Assess, document, and validate the vulnerability management practices across business to ensure compliance against company policy and standards are met.
• Partner with teams who implement technology and achieve methods for aligning to their processes and reduce vulnerabilities. Work as a team to consistently learn and share advanced skills and foster team excellence.
• Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.
• Work closely with infrastructure teams to advise and support remediation efforts to close vulnerability exposure to new threats in the wild and verify the organization’s security posture against them.
• Define key performance indicators (KPIs) and metrics across business units to illustrate effectiveness with vulnerability management.

Skills and Experience

• Direct and drive initiatives through diverse teams and organizations to ensure an effective and compliant program.
• Ability to implement process and technologies that make efficient use of vulnerability related data for the purposes of discovery and ing.
• A keen ability to identify and communicate practical risk regarding technical security vulnerabilities to both technical and non-technical audiences.
• Capable of performing vulnerability analysis upon results or zero-day announcements, manage communications, and ensure timely remediation.
• Results oriented cross-functional leadership with proven success partnering with internal and external stakeholders.
• Excellent interpersonal communication, project management and leadership skills. Must be able to communicate effectively and tactfully with all levels of personnel (in person, on the telephone and through written communication).
• Unwavering passion, commitment, and persistence to the business, customers, and technology.
• Attention to detail with flexibility in addressing changing requirements.

Qualifications:

• 8-10+ years of related experience required with a minimum three (3) years of experience as an information security manager, lead, or equivalent.
• Demonstrated success in security and vulnerability management within global enterprise environments.
• Self-starter requiring minimal supervision with demonstrated strategic and tactical thinking, along with decision-making skills and business acumen.
• Excellence in communicating business risk and remediation requirements from assessments.
• Preferably, one or more of the following: CISA, CISM, CISSP, or SANS.
• Bachelor’s Degree in technology or other related field from an accredited university or college; or equivalent work experience in Information Security and Business/Risk Management.

What’s in it for you:

• Benefits kick in day one!
• 6% 401K match
• 3 weeks of vacation, plus site paid holidays
• Benefits*: Trane-Technologies-Benefits-Offered.pdf

Base Compensation Range is $102,000 to $211,500. Total compensation for this role also will include an incentive plan. Disclaimer: This base salary range is based on US national averages. Actual base pay could be a result of seniority, merit, geographic location where the work is performed.

We offer competitive compensation and comprehensive benefits and programs. We are an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, age, marital status, disability, status as a protected veteran, or any legally protected status.