Worker Type
Regular
Job Description
Summary
The Manager of Cyber Threat Exposure Management leads a small team responsible for identifying, validating, prioritizing, and driving remediation of cybersecurity exposures across the enterprise. This role manages the threat exposure life cycle across endpoints, servers, networks, cloud environments, applications, and identity systems.
This is a hands-on leadership position that combines personnel management, technical analysis, and coordination with IT and business stakeholders. The manager translates vulnerability findings, security configuration weaknesses, attack surface changes, and threat intelligence into actionable remediation priorities based on business impact and likelihood of exploitation.
Position Responsibilities
Team Leadership and Program Management
Lead, mentor, and develop a team of 2–3 cybersecurity personnel, establishing clear responsibilities, priorities, and performance expectations.
Manage daily operations, workload assignments, technical development, and quality of deliverables.
Develop and maintain the threat exposure management strategy, roadmap, procedures, and operating cadence.
Establish consistent processes for exposure discovery, validation, prioritization, remediation tracking, and closure verification.
Manage supporting tools and service providers, identifying opportunities to improve coverage, efficiency, and automation.
Exposure Discovery and Assessment
Oversee vulnerability scanning, asset discovery, external attack surface monitoring, and security configuration assessments.
Identify gaps in asset inventory, scanning coverage, security tooling, and ownership that may leave exposures undetected or unresolved.
Assess vulnerabilities, misconfigurations, excessive privileges, unsupported technologies, and exposed services across enterprise environments.
Coordinate authorized security testing and attack path analysis to validate exposures and assess the effectiveness of existing safeguards.
Incorporate findings from penetration tests, security assessments, threat intelligence, and incidents into the exposure management program.
Risk Prioritization and Remediation
Prioritize exposures using exploitability, evidence of active exploitation, asset criticality, external accessibility, business impact, and compensating controls.
Translate technical findings into clear remediation requirements for system owners, IT operations, engineering, and application teams.
Establish risk-based remediation timelines and track findings through verified closure.
Coordinate urgent assessment and remediation activities for actively exploited vulnerabilities and emerging threats.
Escalate overdue or high-impact exposures and communicate remediation barriers to cybersecurity leadership.
Manage exception documentation and review cycles, ensuring residual risks are routed to the appropriate authority for formal acceptance.
Cross-Functional Coordination
Partner with security operations and incident response teams to connect exposure findings with detection opportunities, threat activity, and response priorities.
Work with infrastructure, endpoint, identity, network, cloud, and application teams to address recurring weaknesses and improve secure configurations.
Support governance, risk, and compliance teams with evidence of exposure identification, remediation, exceptions, and control effectiveness.
Integrate exposure management requirements into technology onboarding, change management, and system lifecycle processes.
Metrics, Reporting, and Continuous Improvement
Maintain dashboards and leadership reporting covering assessment coverage, critical exposures, remediation performance, aging findings, and exceptions.
Measure verified risk reduction and recurring exposure trends to identify systemic issues.
Automate scanning workflows, findings enrichment, ticket creation, ownership assignment, and remediation validation where practical.
Provide clear recommendations to leadership on…