[Hiring] Head of Exposure Management @Rolls-Royce

Role Description

The Exposure Management Lead is responsible for leading and maturing the organization’s Vulnerability Management Program to identify, assess, prioritize, and reduce cybersecurity risk across enterprise technology environments. This role provides strategic oversight of vulnerability management processes, technologies, reporting, and remediation activities while partnering closely with infrastructure, application, cloud, security, and business teams.

The Exposure Management Lead serves as the subject matter expert for vulnerability risk management and is accountable for ensuring vulnerabilities are identified, assessed, prioritized, tracked, and remediated in accordance with organizational policies and risk tolerance.

What you will be doing:

• Develop, implement, and maintain the enterprise Exposure Management Program.
• Establish Exposure management policies, standards, procedures, and service level objectives.
• Oversee enterprise vulnerability scanning activities across on-premises, cloud, endpoint, network, and application environments.
• Ensure Exposure assessment coverage across all managed assets.
• Evaluate newly disclosed vulnerabilities and assess organizational exposure.
• Lead Exposure triage and prioritization efforts.
• Develop executive-level reporting and dashboards that communicate organizational risk exposure.
• Present vulnerability trends, remediation performance, and risk metrics to security leadership and business stakeholders.
• Partner with Threat Intelligence and Security Operations teams to prioritize vulnerabilities actively targeted by threat actors.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field with 5+ years of experience in Exposure Management, Security Operations, Security Engineering, Risk Management or related cybersecurity disciplines.
• Master's degree in Cybersecurity, Computer Science, Information Technology, or related field with 3+ years of experience in Exposure Management, Security Operations, Security Engineering, Risk Management or related cybersecurity disciplines.
• JD/PhD.
• Must be a U.S. Citizen or Permanent Resident to be considered for this role.

Requirements

• Experience managing vulnerabilities across cloud, container, and hybrid environments.
• Familiarity with threat intelligence integration and exploitation analysis.
• Experience with security automation and workflow orchestration.
• Knowledge of vulnerability remediation processes within large enterprise environments.
• Experience supporting regulatory, compliance, and audit requirements.

Benefits

• Comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan.
• Opportunity to enroll in health, dental, vision, disability, life and accidental death & dismemberment insurance.
• Flexible spending account and health savings account.
• 401(k) retirement savings plan with a company match.
• Employee Assistance Program.
• Paid Time Off and certain paid holidays.
• Paid parental and family care leave.
• Tuition reimbursement and a long-term incentive plan.