Director of Exposure Management

Job Summary

Leading the design and implementation of the enterprise Exposure Management operating model, the full-time remote Director of Exposure Management will oversee exposure analysis, remediation tracking, and validation while ensuring security findings translate into prioritized actions for measurable risk reduction.

Key responsibilities

• Manage the end-to-end exposure lifecycle, including intake, analysis, prioritization, remediation, and validation
• Establish consistent processes for managing security findings across various domains, including infrastructure and applications
• Develop and execute a multi-year roadmap that aligns exposure management processes with enterprise security objectives

Required qualifications

• Bachelor's degree or equivalent combination of education, training, and work experience
• Demonstrated experience in technical vulnerability management or exposure management
• Strong knowledge of vulnerability analysis, risk assessment, and risk-based remediation
• Experience in establishing remediation ownership and managing escalations across multiple teams
• Ability to translate security needs into clear business requirements for technology partners