Position OverviewAt Apollo, we’re a global team of alternative investment managers passionate about delivering uncommon value to our investors and shareholders. With over 30 years of proven expertise across Private Equity, Credit, and Real Estate, we’re known for our integrated businesses, strong investment performance, and value-oriented philosophy — all powered by our people.Role OverviewApollo is seeking a Vulnerability Management and Cyber Controls Lead to join our dynamic and growing Cybersecurity organization. This individual will own and evolve the firm’s global Vulnerability Management (VM) program — driving continuous improvement toward a best-in-class capability.This is a technical and hands-on role, responsible for end-to-end processes spanning external exposure management, imminent threat response, vulnerability identification and prioritization, and facilitation of remediation across infrastructure, applications, and cloud environments.The ideal candidate combines deep technical expertise with strategic vision — able to design, operate, and improve scalable, data-driven solutions that strengthen Apollo’s overall security posture.Primary Responsibilities<ul><li>Own and mature the global Vulnerability Management program, covering external exposure, imminent threats, vulnerability identification and prioritization, and remediation facilitation.</li><li>Serve as the technical subject matter expert for vulnerability management tools and processes (e.g., Tenable, Qualys, Rapid7, or equivalent).</li><li>Continuously assess and improve VM processes to achieve best-in-class coverage, efficiency, and visibility.</li><li>Leverage automation, analytics, and threat intelligence to enhance accuracy and reduce remediation timelines.</li><li>Operate and optimize scanning platforms, discovery tooling, and reporting pipelines to ensure comprehensive asset visibility.</li><li>Partner with Infrastructure, Engineering, Application, and Cloud teams to drive effective risk reduction across environments.</li><li>Lead critical vulnerability identification and response exercises, including analysis of zero-day or imminent threats.</li><li>Develop and maintain metrics, dashboards, and executive-level reporting on vulnerability posture, remediation progress, and program maturity.</li><li>Collaborate with Enterprise Risk, Internal Audit, and Application Security teams to ensure alignment with firm-wide risk management practices.</li><li>Maintain ownership of service delivery quality, issue resolution, and stakeholder communication.</li><li>Stay current with industry trends, threat intelligence, and evolving tools to proactively strengthen Apollo’s defenses.</li></ul>Qualifications &amp; Experience<ul><li>7+ years of experience in Cybersecurity, Infrastructure Security, or Vulnerability Management.</li><li>Technical proficiency across network, system, and application layers — including scanning methodologies, asset discovery, and exploit analysis.</li><li>Hands-on experience operating and tuning vulnerability management tools (e.g., Tenable.io, Qualys VMDR, Rapid7 InsightVM) and discovery utilities (e.g., Nmap, SSLScan, Shodan, or custom scripts).</li><li>Experience leveraging threat intelligence and CVSS/CISA/EPSS data for vulnerability prioritization.</li><li>Strong understanding of cloud infrastructure (AWS, Azure, GCP) and modern application stacks.</li><li>Proficiency in scripting or automation (e.g., Python, PowerShell, Bash) and query-based data analysis (SQL, Excel, or equivalent).</li><li>Demonstrated success in building and optimizing technical processes at scale; experience designing metrics, dashboards, and analytics (Tableau, PowerBI, or similar).</li><li>Ability to partner across technical and business teams, influence remediation activities, and communicate risk in clear, actionable terms.</li><li>Knowledge of IT processes, secure configuration baselines, and control frameworks (CIS, NIST, ISO, FFIEC).</li><li>Experience in financial services or other highly regulated environments preferred.</li><li>Consulting or architecture background a plus.</li></ul>Pay Range$140,000 – $205,000Apollo Global Management, Inc. (together with its subsidiaries and affiliates) is committed to championing opportunity.The firm and its affiliates comply with applicable discrimination and equal opportunities legislation in all of its jurisdictions and do not discriminate in employment or recruitment based on race, color, religion, gender, national origin, veteran status, disability, age, citizenship, marital or domestic/civil partnership status, sexual orientation, gender identity or expression or any other protected characteristic under applicable law.The contents of the qualifications and experience section of this job description are a guideline only. If an applicant can otherwise demonstrate their suitability for the role they will be considered.The base salary range for this position is listed above. This position is also eligible for a discretionary annual bonus based on personal, team, and Firm performance. Compensation ranges are based on several factors including job function, level, and geographic location. Final offer amounts are determined by multiple factors including candidate experience and expertise, and may vary from the amounts listed here.

<h5>Apollo aims to be a leading provider of flexible and long-duration capital enabling the energy transition. </h5>Apollo’s Sustainable Investing Platform leverages our deep experience across asset classes to deploy capital in key sectors driving the energy transition and decarbonization. The scale and breadth of this opportunity is significant, and across asset classes, Apollo sees the opportunity to deploy, commit, or arrange more than $100 billion by 2030.Since 2022, Apollo-managed funds have deployed, committed or arranged over $59 billion¹ into energy transition, infrastructure and sustainability-related investments, supporting companies and projects across infrastructure, wind, solar, storage and renewable fuels, as well as a wide range of technologies to facilitate decarbonization. Apollo has also played an active role in helping finance the transformation of certain traditional energy companies.

Vulnerability Management and Cyber Controls Lead

Position OverviewAt Apollo, we’re a global team of alternative investment managers passionate about delivering uncommon value to our investors and shareholders. With over 30 years of proven expertise across Private Equity, Credit, and Real Estate, we’re known for our integrated businesses, strong investment performance, and value-oriented philosophy — all powered by our people.Role OverviewApollo is seeking a Vulnerability Management and Cyber Controls Lead to join our dynamic and growing Cybersecurity organization. This individual will own and evolve the firm’s global Vulnerability Management (VM) program — driving continuous improvement toward a best-in-class capability.This is a technical and hands-on role, responsible for end-to-end processes spanning external exposure management, imminent threat response, vulnerability identification and prioritization, and facilitation of remediation across infrastructure, applications, and cloud environments.The ideal candidate combines deep technical expertise with strategic vision — able to design, operate, and improve scalable, data-driven solutions that strengthen Apollo’s overall security posture.Primary Responsibilities<ul><li>Own and mature the global Vulnerability Management program, covering external exposure, imminent threats, vulnerability identification and prioritization, and remediation facilitation.</li><li>Serve as the technical subject matter expert for vulnerability management tools and processes (e.g., Tenable, Qualys, Rapid7, or equivalent).</li><li>Continuously assess and improve VM processes to achieve best-in-class coverage, efficiency, and visibility.</li><li>Leverage automation, analytics, and threat intelligence to enhance accuracy and reduce remediation timelines.</li><li>Operate and optimize scanning platforms, discovery tooling, and reporting pipelines to ensure comprehensive asset visibility.</li><li>Partner with Infrastructure, Engineering, Application, and Cloud teams to drive effective risk reduction across environments.</li><li>Lead critical vulnerability identification and response exercises, including analysis of zero-day or imminent threats.</li><li>Develop and maintain metrics, dashboards, and executive-level reporting on vulnerability posture, remediation progress, and program maturity.</li><li>Collaborate with Enterprise Risk, Internal Audit, and Application Security teams to ensure alignment with firm-wide risk management practices.</li><li>Maintain ownership of service delivery quality, issue resolution, and stakeholder communication.</li><li>Stay current with industry trends, threat intelligence, and evolving tools to proactively strengthen Apollo’s defenses.</li></ul>Qualifications &amp; Experience<ul><li>7+ years of experience in Cybersecurity, Infrastructure Security, or Vulnerability Management.</li><li>Technical proficiency across network, system, and application layers — including scanning methodologies, asset discovery, and exploit analysis.</li><li>Hands-on experience operating and tuning vulnerability management tools (e.g., Tenable.io, Qualys VMDR, Rapid7 InsightVM) and discovery utilities (e.g., Nmap, SSLScan, Shodan, or custom scripts).</li><li>Experience leveraging threat intelligence and CVSS/CISA/EPSS data for vulnerability prioritization.</li><li>Strong understanding of cloud infrastructure (AWS, Azure, GCP) and modern application stacks.</li><li>Proficiency in scripting or automation (e.g., Python, PowerShell, Bash) and query-based data analysis (SQL, Excel, or equivalent).</li><li>Demonstrated success in building and optimizing technical processes at scale; experience designing metrics, dashboards, and analytics (Tableau, PowerBI, or similar).</li><li>Ability to partner across technical and business teams, influence remediation activities, and communicate risk in clear, actionable terms.</li><li>Knowledge of IT processes, secure configuration baselines, and control frameworks (CIS, NIST, ISO, FFIEC).</li><li>Experience in financial services or other highly regulated environments preferred.</li><li>Consulting or architecture background a plus.</li></ul>Pay Range$140,000 – $205,000Apollo Global Management, Inc. (together with its subsidiaries and affiliates) is committed to championing opportunity.The firm and its affiliates comply with applicable discrimination and equal opportunities legislation in all of its jurisdictions and do not discriminate in employment or recruitment based on race, color, religion, gender, national origin, veteran status, disability, age, citizenship, marital or domestic/civil partnership status, sexual orientation, gender identity or expression or any other protected characteristic under applicable law.The contents of the qualifications and experience section of this job description are a guideline only. If an applicant can otherwise demonstrate their suitability for the role they will be considered.The base salary range for this position is listed above. This position is also eligible for a discretionary annual bonus based on personal, team, and Firm performance.&nbsp;Compensation ranges are based on several factors including job function, level, and geographic location. Final offer amounts are determined by multiple factors including candidate experience and expertise, and may vary from the amounts listed here.

Vulnerability Management and Cyber Controls Lead

About the Job

About the Company

Apollo

Similar Jobs

Cyber Incident Response Lead

Cyber Incident Response Lead

Director of Information Technology and Security

Director of Information Technology and Security

Manager - Cyber Security

Manager - Cyber Security

Director, Cybersecurity & Risk

Director, Cybersecurity & Risk

Cybersecurity Application Assessment Service Lead

Cybersecurity Application Assessment Service Lead

Staff Cyber Incident Response Security Engineer

Staff Cyber Incident Response Security Engineer

Software & Systems Lead

Software & Systems Lead

Lead Application Security Engineer

Lead Application Security Engineer

Director, CyberSecurity

Director, CyberSecurity

Cybersecurity Governance Lead

Cybersecurity Governance Lead