[Hiring] Manager, Vulnerability Management & Security Scanning @IXOPAY

Role Description

Aperia Compliance helps businesses across the payments ecosystem navigate complex security and compliance requirements with confidence. We combine deep industry expertise with modern technology and AI-driven intelligence to make vulnerability management, security scanning, and compliance simpler, more efficient, and more reliable for our clients.

We're looking for a Manager, Vulnerability Management & Security Scanning to lead and advance Aperia Compliance's security scanning and vulnerability management solutions.

• Lead the team responsible for delivering PCI DSS external vulnerability scanning services.
• Ensure operational excellence, technical accuracy, regulatory alignment, and a strong client experience.
• Combine people leadership with deep subject-matter expertise in PCI DSS, ASV requirements, vulnerability assessment, and remediation practices.
• Help shape the future of our security offerings by identifying opportunities to expand our capabilities.

What You'll Do

• Lead & Develop the Security Scanning Team:
  • Lead, coach, and develop a team of vulnerability management and security scanning professionals.
  • Oversee team performance, hiring, onboarding, development planning, and resource allocation.
  • Establish clear goals, performance expectations, and quality standards.
  • Build a collaborative, knowledge-sharing environment.
• Own Vulnerability Scanning Operations & Compliance:
  • Oversee the end-to-end delivery of PCI DSS external vulnerability scanning services.
  • Ensure scanning operations meet service-level agreements and quality expectations.
  • Maintain operational practices and technical standards for ASV accreditation.
  • Define and monitor operational KPIs.
  • Evaluate and improve scanning processes and workflows.
  • Manage scanning technologies, vendor relationships, and program budgets.
• Provide Technical Leadership & Expertise:
  • Serve as a senior subject-matter expert in PCI DSS vulnerability scanning.
  • Provide guidance on PCI DSS v4.x requirements.
  • Act as the senior escalation point for complex scanning issues.
  • Establish technical standards and dispute-resolution practices.
  • Evaluate scanning tools and emerging detection capabilities.
  • Support the investigation of infrastructure and web application vulnerabilities.
• Drive Security Services Growth & Innovation:
  • Help define the strategic direction of our vulnerability management and security scanning solutions.
  • Identify opportunities to develop additional cybersecurity and compliance services.
  • Partner with Product, Sales, Client Success, and Leadership on new service offerings.
  • Translate client feedback and industry developments into opportunities for service innovation.
  • Act as a trusted security and PCI DSS authority through client education and thought leadership.
  • Champion the value of effective vulnerability management across teams.

Qualifications

• Extensive professional experience in vulnerability management, security scanning, PCI DSS compliance, or a related cybersecurity discipline.
• Deep hands-on expertise in PCI DSS external vulnerability scanning and ASV methodology.
• Strong knowledge of PCI DSS v4.x and PCI SSC ASV Program requirements.
• Experience with vulnerability scanning technologies such as Qualys, Tenable Nessus, or Rapid7.
• Strong understanding of CVSS scoring and risk assessment.
• Familiarity with common infrastructure and web application vulnerabilities.
• Demonstrated ability to lead, mentor, and develop technical professionals.
• Experience managing operational delivery and service-level agreements.
• Strong communication and stakeholder management skills.
• Relevant cybersecurity or compliance certification, such as CISSP or Security+.

Preferred

• Previous experience working for a PCI SSC Approved Scanning Vendor or similar security assessment provider.
• Experience directly supporting ASV accreditation or program compliance activities.
• PCI QSA qualification or experience participating in PCI DSS assessments.
• Experience developing vulnerability management frameworks or operational playbooks.
• Experience implementing automation or AI-assisted workflows.
• Experience managing security technology vendors or service budgets.
• Experience developing cybersecurity and compliance service offerings.

Benefits

• Remote work-from-home opportunity.
• Competitive salary and benefits.
• Professional growth and development opportunities.
• A collaborative, international team environment.
• Opportunities to work with modern SaaS, security, automation, and AI technologies.

Our Commitment to Inclusion

We know great candidates don't always meet every qualification. If you're excited about this opportunity, we encourage you to apply—we'd love to hear what you can bring to IXOPAY.

IXOPAY is committed to building an inclusive workplace where everyone can thrive. We welcome applications from all qualified candidates regardless of race, ethnicity, religion, gender, gender identity or expression, sexual orientation, age, disability, or any other characteristic protected by applicable law.