Threat & Exposure Management Lead

MS Reinsurance; Zürich; Vor Ort; CHF 150.000 - 210.000; Vollzeit

Zusammenfassung

MS Reinsurance, a Swiss-based reinsurer, is seeking a Threat & Exposure Management Lead to advance its CTEM capabilities and cyber resilience across technology and business functions. You will identify exposures, drive threat-informed remediation, and oversee attack surface management and KPI reporting, partnering with vendors and internal teams to reduce real-world risk in Azure/Defender environments.

Fluency in English is required.

Qualifikationen

• Proven experience in vulnerability management and cyber risk mitigation.
• Experience with CTEM, security posture management, and attack surface analysis.
• Ability to translate technical risks into practical remediation actions for technical and business stakeholders.
• Experience with security vendors and cross-functional teams.

Aufgaben

• Lead and mature the CTEM capability across the enterprise.
• Identify, assess and prioritise cyber exposures.
• Drive threat-informed remediation and measurable exposure reduction.
• Oversee attack surface management and exploitability-based prioritisation.
• Provide security guidance across infrastructure, cloud, identity, and software supply-chain environments.
• Manage key security providers and technology partners.
• Develop exposure metrics and reporting to demonstrate risk reduction.
• Support cyber security strategy and continuous improvement.

Kenntnisse

Vulnerability management

Security engineering

Cyber risk

CTEM

Attack surface

Security posture

Azure Defender

English fluency

Vendor management

Tools

Azure/Azure Defender

Jobbeschreibung

MS Reinsurance is a global reinsurer domiciled in Switzerland with underwriting offices in Zurich, Bermuda, Miami, and New York. The Company underwrites non-life treaty reinsurance solutions on a worldwide basis through its three business units: Americas, International, and Specialty Lines. As part of the world-leading insurance group MS&AD, MS Reinsurance combines reliability and agility to make its clients’ businesses stronger. With a drive to move quickly and a commitment to long term partnership, MS Reinsurance supports its partners with the momentum and stability they can build on.

About the role

Reporting to the Head of Cyber, the Threat & Exposure Management Lead will play a key role in advancing MS Reinsurance’s cyber resilience strategy by leading the organisation’s Continuous Threat & Exposure Management capability. Working across technology and business functions, the role focuses on understanding real-world threats, reducing cyber exposure, and aligning security initiatives with business priorities and risk outcomes. The role goes beyond traditional vulnerability management by focusing on how adversaries could realistically exploit weaknesses across the environment.

Your responsibilities

• Lead and mature the Continuous Threat & Exposure Management (CTEM) capability.
• Identify, assess and prioritise cyber exposures across the enterprise.
• Drive threat-informed remediation and measurable exposure reduction.
• Oversee attack surface management, attack path analysis and exploitability-based prioritisation.
• Provide security guidance across infrastructure, cloud, identity, application and software supply-chain environments.
• Manage key security service providers and technology partners, validating and challenging outputs where required.
• Develop exposure metrics and reporting to demonstrate measurable cyber risk reduction.
• Support cyber security strategy execution and continuous improvement of the organisation's security posture.

Your profile

• Proven experience in vulnerability management, security engineering, cyber risk, Continuous Threat & Exposure Management, security posture management, attack surface management, or similar cyber security disciplines.
• Strong understanding of enterprise technology environments, including infrastructure, cloud, identity, endpoint, and application security, ideally within Microsoft Azure and Defender ecosystems.
• Ability to translate technical risks, using attacker mindset and attack-path reasoning, into practical remediation and risk reduction actions for technical and business stakeholders.
• Experience working with security vendors, managed service providers, and cross-functional technology teams.
• Strong stakeholder management, communication, and advisory skills, combined with a structured and results-oriented approach.
• Professional proficiency in English.
• Experience and certifications in DevSecOps, CISSP, CISM, Microsoft Security/Azure Security, or offensive security certifications (OSCP, GPEN, GWAPT) is an advantage.

Why Work With Us

Make your mark with us. At MS Reinsurance, we’re big enough to make a difference and small enough that everyone counts.

We offer an entrepreneurial culture, where there’s less hierarchy and more action, and room for innovation. Here, you’ll have the power to drive real change and shape our path ahead.

Join a place where ambition can become reality, with development and platforms that support where you want to go next. Together, we'll help you discover your potential as we expand ours.

We live day-to-day by our values: collaborative, progressive, empowering, and responsible. This means you’ll join a team which upholds mutual trust and treats each other with respect. While teamwork is at the heart of our approach to reinsurance, we don’t expect our team to think alike; at MS Re, we don’t just welcome your differences, we believe they’re essential to our success.

Does this sound like a culture you want to be part of?

In case of questions, please contact us via email: [e-mail]

Note that we will only consider applicants eligible to work in Switzerland or USA.

MS Reinsurance is the market-facing brand of the risk carrying legal entity MS Amlin AG, a global reinsurer domiciled in Switzerland and operating in Bermuda as MS Amlin AG, Bermuda Branch, in the United States through MS Amlin Reinsurance Managers, Inc, and in Labuan, Malaysia as MS Amlin AG, Labuan Branch.