Manager, Vulnerability & Attack Surface Management

Job Description - Manager, Vulnerability & Attack Surface Management (24010699)Who we are:MoneyGram is a customer-centric, digital-first, cross-border money movement network. Through our strong culture of fintech innovation, we’re transforming the way consumers and businesses send and receive money in nearly every country around the world.This is all made possible by our dedicated and diverse team of professionals around the world. If you’re ready for a career journey filled with exciting opportunities, come aboard and let’s drive the future of payments together at MoneyGram!What you will contribute:The Manager, Information Security leads information security initiatives for the Company. As the Manager of Information Security, you will be at the forefront of safeguarding MoneyGram’s systems and data. Your primary responsibility will be to lead a team in ensuring the integrity, confidentiality, and availability of our systems and data through proactive vulnerability management, robust application security practices, and efficient detection of security threats.What you’ll do:Lead a vulnerability management program that ensures vulnerabilities are detected, assessed for severity, and remediated in accordance with Company policies.Lead efforts to ensure application security is effectively incorporated into the SDLC.Partner with engineering teams to ensure that secure coding practices are implemented in accordance with application security standards.Manage engagements with third-party penetration testing vendors to assess the security posture of MoneyGram infrastructure and applications.Keep abreast of new and evolving security threats to ensure the Company remains adequately protected.Consults with business partners on security matters to ensure security efforts are aligned across the enterprise.Responds to regulatory and audit requests to support compliance initiatives.Performs other duties as assigned.What we’re looking for:8+ years' Information Security experience.2+ years' experience managing direct reports; includes employee selection, motivation, coaching, and providing timely defensible constructive feedback.Proven experience in information security domains of vulnerability management and application security.Knowledge of common security frameworks (NIST CSF, ISO) and regulatory requirements (PCI, GDPR, DORA).Technical expertise in application security tools and functions, including dynamic application security testing (DAST) and static application security testing (SAST).Hands-on experience with industry-leading vulnerability management tools such as Qualys, Nessus, or Rapid7.Deep understanding of common web application vulnerabilities (e.g., OWASP Top 10) and techniques for mitigating them.Familiarity with cloud security principles and best practices, particularly in assessing and securing cloud-based applications and infrastructure (e.g., AWS, Azure, GCP).Bachelor’s degree in computer science, Information Security or a related field; or equivalent experience.Certified Information System Security Professional (CISSP), CISA, CISM or equivalent certifications desired.Why you will love working here:Flexible Remote First FlexibilityGenerous PTO13 Paid HolidaysMedical / Dental / Vision InsuranceLife, Disability and other benefits401K with competitive Employer MatchCommunity Service DaysGenerous parental leaveAnticipated Base Pay: $150K - $175K + participation in our annual bonus plan.Disclaimer:

The salary/pay rate listed is a good faith determination that may be offered to a successful applicant for this position at the time of this job advertisement based on company hiring process and budget for this role and may be modified in the future. Actual compensation may vary from posting based on geographic location, work experience, education and/or skill level.At MoneyGram, we celebrate the inclusivity and diversity of our employees. We're committed to promoting a respectful workplace where every applicant gets an equal opportunity to work at MoneyGram. We prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression or any other characteristic protected by federal, state or local laws.

#J-18808-Ljbffr