CTEM Lead — Cyber Threat & Exposure Management

MS Amlin AG; Zürich; Vor Ort; CHF 180.000 - 240.000; Vollzeit

Zusammenfassung

MS Reinsurance is seeking a Threat & Exposure Management Lead reporting to the Head of Cyber to advance the organisation’s cyber resilience by leading the CTEM capability across technology and business functions.

You will identify and prioritise cyber exposures, drive threat-informed remediation, oversee attack surface analysis, and provide security guidance across infrastructure, cloud, identity, and software supply-chain environments. English proficiency required.

Qualifikationen

• Proven experience in vulnerability management and CTEM.
• Strong understanding of enterprise tech incl. cloud, identity, endpoint and application security.
• Experience working with security vendors, MSPs and cross-functional tech teams.
• Professional proficiency in English.

Aufgaben

• Lead and mature the Continuous Threat & Exposure Management (CTEM) capability.
• Identify, assess and prioritise cyber exposures across the enterprise.
• Drive threat-informed remediation and measurable exposure reduction.
• Oversee attack surface management, attack path analysis and exploitability-based prioritisation.
• Provide security guidance across infrastructure, cloud, identity, application and software supply-chain environments.
• Manage key security service providers and technology partners, validating outputs.
• Develop exposure metrics and reporting to demonstrate cyber risk reduction.
• Support cyber security strategy execution and continuous improvement of the organisation's security posture.

Kenntnisse

CTEM

Vulnerability management

Security engineering

Cyber risk

Attack surface management

Threat modelling

Tools

Azure Defender

Jobbeschreibung

MS Reinsurance is seeking a Threat & Exposure Management Lead reporting to the Head of Cyber to advance the organisation’s cyber resilience by leading the CTEM capability across technology and business functions.

You will identify and prioritise cyber exposures, drive threat-informed remediation, oversee attack surface analysis, and provide security guidance across infrastructure, cloud, identity, and software supply-chain environments. English proficiency required.