Cyber Manager - Threat Exposure Management

Professional Background

8–10+ years of progressive experience in enterprise cyber security with demonstrable in-depth technical expertise across Threat Exposure Management, Vulnerability Management, Defensive and Offensive Security, Application Security, Cloud Security, OT/ICS Security, Data and Identity Security, and AI/ML Security. Experience must span large-scale, heterogeneous environments with complex technology stacks. Certifications such as CISSP, CISM and GIAC (GMON, GICSP, GWEB, GCSA) are advantageous, but equivalent hands-on technical capability, advanced analytical proficiency, and a strong record of continuous learning and practical security training are essential.

Leadership & Communication

• Proven experience in directly managing a team of Threat Exposure and Vulnerability Management Analysts, including mentoring, developing and guiding security professionals within a collaborative, high-performing environment.

• Strong strategic and visionary capabilities, with the ability to co-develop and drive the function’s technical vision, strategy and roadmap in alignment with business objectives and the organisation’s threat appetite. Technical Expertise

• Deep knowledge of vulnerability management, threat exposure management, exploit development concepts, exposure validation, and remediation governance.

• Strong understanding of common security vulnerabilities, attack vectors, and security testing frameworks, such as OWASP, MITRE ATT&CK, CVE / CVSS, and NIST SP 800-53.

• Robust expertise across technical domains such as IT, OT, Cloud, network security, container environments, and identity-centric security. Proven capability in AppSec, secure coding practices, CI/CD and IaC security, and DevSecOps tooling.

• Solid understanding of AI/ML architecture, AI security threats, LLM exposure risks, and secure integration patterns.

• Hands-on expertise with tooling in different landscapes: VM, ASM/EASM, AppSec, Cloud, OT, Data, Identity, AI. Stakeholder Engagement & Culture

• Serve as the advisor and central point of contact for all Threat Exposure and Vulnerability Management matters across the organisation within a given scope.

• Build strong relationships with industry partners, vendors, and the wider technology ecosystem to incorporate external expertise, benchmark performance, and stay ahead of emerging threats and vulnerability trends.

• Develop trusted relationships across Cyber, Portfolio teams, Engineering, and Business functions, anchored in transparency, accountability, and the organisation’s core values.

• Lead by example in strengthening collaboration, breaking down silos, and cultivating high-performing cross-functional networks.

• Promote a values-driven culture that embraces diversity, inclusion, and collective ownership of cyber risk.

• Champion staff education, awareness, and secure behaviours to embed a proactive, cyber-aware mindset across the organisation.

• Foster a responsive, delivery-focused culture that partners effectively with Technology and Business units to drive timely resolutions and value-led security outcomes.