Job Summary

Job Description

What is the opportunity?

As a Vulnerability Scanning Product Manager, you will oversee the end-to-end lifecycle of enterprise vulnerability scanning tools, ensuring their effectiveness in identifying vulnerabilities across on-premises, cloud, IoT, and network assets. You will play a key role in defining and executing the product strategy, collaborating with technical teams and business stakeholders to deliver innovative and scalable solutions. This role requires a mix of technical expertise, strategic thinking, and stakeholder management to ensure the organization maintains a strong security posture.

What will you do?

Develop and maintain the roadmap for enterprise vulnerability scanning tools, ensuring alignment with business objectives and emerging security trends.

Collaborate with engineering teams to define requirements, prioritize features, and oversee the development, testing, and deployment of new scanning capabilities.

Work closely with security teams, IT operations, and business units to understand scanning requirements, address gaps, and drive adoption of scanning tools.

Ensure scanning solutions are effective across a diverse range of environments, including on-premises infrastructure, multi-cloud platforms, IoT devices, and hybrid networks.

Design and implement features that provide actionable insights from scan results, integrating with reporting systems and dashboards for risk management and compliance reporting.

Partner with third-party scanning tool providers to evaluate, integrate, and optimize their products to meet organizational needs.

Develop and execute training and communication plans to promote tool usage, ensuring users understand features and best practices for scanning enterprise assets.

Define and track key performance indicators (KPIs) for scanning tool effectiveness, adoption, and user satisfaction, continuously identifying areas for improvement.

Research and analyze industry trends, emerging threats, and evolving scanning technologies to ensure the organization remains at the forefront of vulnerability management.

What do you need to succeed?

 Must have:

Proven experience in product management, preferably within vulnerability management, cybersecurity, or IT infrastructure.

Strong understanding of vulnerability scanning technologies, protocols, and standards (e.g., CVSS, OpenVAS, Nessus, Qualys).

Knowledge of enterprise environments, including cloud platforms (AWS, Azure, GCP), IoT ecosystems, and traditional on-premises infrastructure.

Excellent communication and collaboration skills, with the ability to translate technical concepts for diverse stakeholders.

Experience with agile methodologies and tools, such as Jira or Azure DevOps, for backlog management and sprint planning.

Analytical mindset with the ability to derive insights from data and drive evidence-based decision-making.

Nice-to-have: 

Certifications in cybersecurity or product management, such as CISSP, CISM, PMP, or CSPO.

Hands-on experience with implementing or managing vulnerability scanning tools in a large-scale enterprise.

Familiarity with DevSecOps practices and integration of scanning tools into CI/CD pipelines.

Experience with advanced reporting and data visualization tools, such as Power BI or Tableau.

Knowledge of emerging technologies in vulnerability management, such as AI/ML-driven risk prioritization.

Prior experience in vendor negotiations and management.

Familiarity with regulatory compliance requirements (e.g., GDPR, PCI DSS, ISO 27001) and their impact on vulnerability management.

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.

Leaders who support your development through coaching and managing opportunities.

Ability to make a difference and lasting impact.

Work in a dynamic, collaborative, progressive, and high-performing team.

A world-class training program in financial services.

#LI-Hybrid

#LI-POST

#TECHPJ

Job Skills

Critical Thinking, Cyber Security Management, Decision Making, Detail-Oriented, Information Security Management, Information Technology Security, Interpersonal Relationship Management, IT Security Architecture, Performance Management (PM)

Additional Job Details

Address:

330 FRONT ST W:TORONTO

City:

TORONTO

Country:

Canada

Work hours/week:

37.5

Employment Type:

Full time

Platform:

TECHNOLOGY AND OPERATIONS

Job Type:

Regular

Pay Type:

Salaried

Posted Date:

2025-01-17

Application Deadline:

2025-02-24

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Inclusion and Equal Opportunity Employment

At RBC, we embrace diversity and inclusion for innovation and growth. We are committed to building inclusive teams and an equitable workplace for our employees to bring their true selves to work. We are taking actions to tackle issues of inequity and systemic bias to support our diverse talent, clients and communities.
​​​​​​​
We also strive to provide an accessible candidate experience for our prospective employees with different abilities. Please let us know if you need any accommodations during the recruitment process.

Join our Talent Community

Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.

Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.