IBM
Cybersecurity Remediation Manager

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Introduction
At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You’ll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.
Your Role And Responsibilities
The CISO Remediation Team is seeking a manager of security remediation to lead a team of cybersecurity Remediation Engineers. This role is responsible for driving the successful execution of remediation efforts across the IBM enterprise, ensuring security risks are addressed effectively, sustainably, and at scale.
The manager operates at the intersection of people leadership, technical oversight, and cross‑organizational coordination, partnering closely with Security Operations, Incident Response, Product, Infrastructure, and Architecture teams. The role balances technical depth with leadership, enabling engineers to execute remediation while aligning work to enterprise risk priorities.
This is not a SOC operations or detection leadership role. The focus is on post‑finding and post‑incident remediation, vulnerability reduction, and systemic security improvements.
Level, scope, and strategic responsibility will align with experience and band.
Key Responsibilities
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
People & Team Leadership: Lead, coach, and develop a team of Remediation Engineers, supporting career growth. Set clear expectations for execution, ownership, and technical quality. Foster a culture of accountability, collaboration, and continuous improvement. Participate in hiring, onboarding, performance management, and succession planning. Technical & Delivery Oversight: Provide technical guidance and review for remediation strategies, ensuring solutions address root causes and reduce recurring risk. Provide guidance on the appropriate use of automation and AI‑assisted tooling in remediation workflows, ensuring human judgment, security, and compliance requirements are maintained. Ensure remediation efforts are prioritized based on enterprise risk, impact, and feasibility. Balance hands‑on technical engagement with delegation and oversight as appropriate. Support engineers during high‑severity incidents, escalations, and complex remediation efforts. Coach engineers on effective technical communication, including how to explain remediation approaches and risk to non‑technical stakeholders. Cross‑Team & Stakeholder Engagement: Partner with Security Operations, Incident Response, Product, and Infrastructure leaders to drive remediation outcomes. Influence remediation priorities and decisions across federated teams without direct authority. Translate technical remediation needs into clear risk‑based messaging for leadership and stakeholders. Resolve blockers related to ownership, prioritization, or execution of remediation work. Represent remediation efforts in leadership forums, communicating progress, tradeoffs, and risk in clear, outcome‑focused language. Strategy, Process, and Continuous Improvement: Contribute to or define remediation standards, patterns, and best practices. Promote the responsible adoption of automation and AI to improve remediation effectiveness and reduce mean time to remediation (MTTR.) Identify systemic gaps and drive improvements to remediation processes, tooling, and workflows. Track and communicate remediation progress, trends, and risk reduction outcomes. Ensure alignment between remediation activities and broader CISO objectives.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Preferred Education
Master's Degree
Required Technical And Professional Expertise
Demonstrated experience leading technical teams in security, infrastructure, cloud, or platform engineering. Strong understanding of vulnerability management, incident response lifecycles, and remediation practices. Ability to guide engineers through ambiguous, high‑pressure technical challenges. Proven ability to influence across organizations and drive outcomes without direct control. Strong communication skills, with the ability to translate technical issues into business and risk context. Experience operating in large, complex, federated enterprise environments.
Preferred Technical And Professional Experience
Experience managing or leading security remediation, vulnerability management, or post‑incident response efforts. Background in one or more technical domains: cloud, networking, operating systems, automation, or security platforms. Experience working with Agile or product‑aligned engineering teams. Experience applying enterprise security frameworks and risk management practices to prioritize and guide remediation decisions (e.g., NIST CSF, NIST 800‑series). Certifications are a plus but not required (e.g., CISSP, CISM, cloud security certifications).
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location