Manager, Vulnerability Management & Security Scanning

Lead & Develop the Security Scanning Team • Lead, coach, and develop a team of vulnerability management and security scanning professionals, fostering technical excellence, accountability, and continuous improvement. • Oversee team performance, hiring, onboarding, development planning, and resource allocation. • Establish clear goals, performance expectations, and quality standards that support reliable service delivery and professional growth. • Build a collaborative, knowledge-sharing environment that encourages technical development, sound judgment, and ownership. Own Vulnerability Scanning Operations & Compliance • Oversee the end-to-end delivery of PCI DSS external vulnerability scanning services, including scheduling, scan execution, reporting, remediation support, and attestation. • Ensure scanning operations meet service-level agreements, quality expectations, and applicable PCI SSC ASV Program requirements. • Maintain operational practices and technical standards that support our ASV accreditation and standing. • Define and monitor operational KPIs, including scan volumes, turnaround times, remediation timelines, dispute rates, and client satisfaction. • Evaluate and improve scanning processes, workflows, and quality assurance practices to strengthen efficiency, accuracy, and scalability. • Manage scanning technologies, vendor relationships, and program budgets to support effective service delivery.

At IXOPAY, you'll play an important role in creating the technology experience that enables our global teams to do their best work. You'll support a modern, cloud-based technology environment while gaining exposure to identity and access management, SaaS administration, automation, security, and IT operations. You'll have opportunities to improve how we work—not just resolve tickets—by identifying recurring challenges, automating manual processes, and helping evolve our internal IT practices as the company grows. •

About IXOPAY IXOPAY is the enterprise-grade global payment infrastructure platform built for the era of agentic commerce. We equip merchants and enterprises with AI-driven intelligence, payment orchestration, advanced tokenization, and the tools to optimize every stage of the payments journey. From intelligent routing and compliance to customizable modules and enterprise-scale orchestration, IXOPAY helps businesses integrate faster, improve payment performance, and expand globally with confidence. At IXOPAY, our people are our greatest strength. Our collaborative culture is built on shared values that guide how we work, innovate, and support our customers. About Aperia Compliance Aperia Compliance helps businesses across the payments ecosystem navigate complex security and compliance requirements with confidence. We combine deep industry expertise with modern technology and AI-driven intelligence to make vulnerability management, security scanning, and compliance simpler, more efficient, and more reliable for our clients. From PCI DSS external vulnerability scanning and remediation guidance to compliance program management and reporting, Aperia Compliance equips businesses with the tools, expertise, and insights they need to strengthen security, maintain compliance, and adapt to evolving industry requirements. We're looking for a Manager, Vulnerability Management & Security Scanning to lead and advance Aperia Compliance's security scanning and vulnerability management solutions. In this role, you'll lead the team responsible for delivering PCI DSS external vulnerability scanning services, ensuring operational excellence, technical accuracy, regulatory alignment, and a strong client experience. You'll combine people leadership with deep subject-matter expertise in PCI DSS, Approved Scanning Vendor (ASV) requirements, vulnerability assessment, and remediation practices. Beyond managing day-to-day operations, you'll help shape the future of our security offerings. Working closely with Product, Client Success, Sales, and Leadership, you'll identify opportunities to expand our capabilities beyond traditional PCI DSS scanning and develop services that address emerging client security and compliance needs. This is an opportunity to combine technical expertise, team leadership, and strategic influence to strengthen our existing services while helping grow our presence in the broader cybersecurity and compliance market. What You'll Do Lead & Develop the Security Scanning Team • Lead, coach, and develop a team of vulnerability management and security scanning professionals, fostering technical excellence, accountability, and continuous improvement. • Oversee team performance, hiring, onboarding, development planning, and resource allocation. • Establish clear goals, performance expectations, and quality standards that support reliable service delivery and professional growth. • Build a collaborative, knowledge-sharing environment that encourages technical development, sound judgment, and ownership. Own Vulnerability Scanning Operations & Compliance • Oversee the end-to-end delivery of PCI DSS external vulnerability scanning services, including scheduling, scan execution, reporting, remediation support, and attestation. • Ensure scanning operations meet service-level agreements, quality expectations, and applicable PCI SSC ASV Program requirements. • Maintain operational practices and technical standards that support our ASV accreditation and standing. • Define and monitor operational KPIs, including scan volumes, turnaround times, remediation timelines, dispute rates, and client satisfaction. • Evaluate and improve scanning processes, workflows, and quality assurance practices to strengthen efficiency, accuracy, and scalability. • Manage scanning technologies, vendor relationships, and program budgets to support effective service delivery. Provide Technical Leadership & Expertise • Serve as a senior subject-matter expert in PCI DSS vulnerability scanning, CVSS scoring, vulnerability validation, false-positive handling, and risk assessment. • Provide guidance on PCI DSS v4.x requirements and translate complex technical and compliance concepts into practical recommendations. • Act as the senior escalation point for complex scanning issues, disputed findings, and high-impact client concerns. • Establish technical standards, playbooks, and dispute-resolution practices that promote consistency and defensible decisions. • Evaluate scanning tools, emerging detection capabilities, automation, and AI-assisted workflows to improve accuracy, productivity, and service quality. • Support the investigation and assessment of infrastructure and web application vulnerabilities, including common security issues such as SQL injection and cross-site scripting. Drive Security Services Growth & Innovation • Help define the strategic direction and expansion of our vulnerability management and security scanning solutions. • Identify opportunities to develop additional cybersecurity and compliance services that address evolving market needs. • Partner with Product, Sales, Client Success, and Leadership to evaluate new service offerings, establish requirements, and support go-to-market initiatives. • Translate client feedback, industry developments, and regulatory changes into opportunities for service innovation and improvement. • Act as a trusted security and PCI DSS authority through client education, webinars, industry engagement, and thought leadership. • Champion the value of effective vulnerability management and security compliance across internal teams and external stakeholders. What You'll Bring Required • Extensive professional experience in vulnerability management, security scanning, PCI DSS compliance, or a related cybersecurity discipline, including experience leading technical teams or complex programs. • Deep hands-on expertise in PCI DSS external vulnerability scann