Threat & Exposure Management Lead

MS Amlin AG; Zürich; Vor Ort; CHF 180.000 - 240.000; Vollzeit

Zusammenfassung

MS Reinsurance is seeking a Threat & Exposure Management Lead reporting to the Head of Cyber to advance the organisation’s cyber resilience by leading the CTEM capability across technology and business functions.

You will identify and prioritise cyber exposures, drive threat-informed remediation, oversee attack surface analysis, and provide security guidance across infrastructure, cloud, identity, and software supply-chain environments. English proficiency required.

Qualifikationen

• Proven experience in vulnerability management and CTEM.
• Strong understanding of enterprise tech incl. cloud, identity, endpoint and application security.
• Experience working with security vendors, MSPs and cross-functional tech teams.
• Professional proficiency in English.

Aufgaben

• Lead and mature the Continuous Threat & Exposure Management (CTEM) capability.
• Identify, assess and prioritise cyber exposures across the enterprise.
• Drive threat-informed remediation and measurable exposure reduction.
• Oversee attack surface management, attack path analysis and exploitability-based prioritisation.
• Provide security guidance across infrastructure, cloud, identity, application and software supply-chain environments.
• Manage key security service providers and technology partners, validating outputs.
• Develop exposure metrics and reporting to demonstrate cyber risk reduction.
• Support cyber security strategy execution and continuous improvement of the organisation's security posture.

Kenntnisse

CTEM

Vulnerability management

Security engineering

Cyber risk

Attack surface management

Threat modelling

Tools

Azure Defender

Jobbeschreibung

About MS Reinsurance

MS Reinsurance is a global reinsurer domiciled in Switzerland with underwriting offices in Zurich, Bermuda, Miami, and New York. The Company underwrites non-life treaty reinsurance solutions on a worldwide basis through its three business units: Americas, International, and Specialty Lines. As part of the world-leading insurance group MS&AD, MS Reinsurance combines reliability and agility to make its clients’ businesses stronger. With a drive to move quickly and a commitment to long term partnership, MS Reinsurance supports its partners with the momentum and stability they can build on.

About the role

Reporting to the Head of Cyber, the Threat & Exposure Management Lead will play a key role in advancing MS Reinsurance’s cyber resilience strategy by leading the organisation’s Continuous Threat & Exposure Management capability. Working across technology and business functions, the role focuses on understanding real-world threats, reducing cyber exposure, and aligning security initiatives with business priorities and risk outcomes. The role goes beyond traditional vulnerability management by focusing on how adversaries could realistically exploit weaknesses across the environment.

Your responsibilities

• Lead and mature the Continuous Threat & Exposure Management (CTEM) capability.


• Identify, assess and prioritise cyber exposures across the enterprise.


• Drive threat-informed remediation and measurable exposure reduction.


• Oversee attack surface management, attack path analysis and exploitability-based prioritisation.


• Provide security guidance across infrastructure, cloud, identity, application and software supply-chain environments.


• Manage key security service providers and technology partners, validating and challenging outputs where required.


• Develop exposure metrics and reporting to demonstrate measurable cyber risk reduction.


• Support cyber security strategy execution and continuous improvement of the organisation's security posture.

Your profile

• Proven experience in vulnerability management, security engineering, cyber risk, Continuous Threat & Exposure Management, security posture management, attack surface management, or similar cyber security disciplines.


• Strong understanding of enterprise technology environments, including infrastructure, cloud, identity, endpoint, and application security, ideally within Microsoft Azure and Defender ecosystems.


• Ability to translate technical risks, using attacker mindset and attack-path reasoning, into practical remediation and risk reduction actions for technical and business stakeholders.


• Experience working with security vendors, managed service providers, and cross-functional technology teams.


• Strong stakeholder management, communication, and advisory skills, combined with a structured and results-oriented approach.


• Professional proficiency in English.


• Experience and certifications in DevSecOps, CISSP, CISM, Microsoft Security/Azure Security, or offensive security certifications (OSCP, GPEN, GWAPT) is an advantage.

Why Work With Us

Make your mark with us. At MS Reinsurance, we’re big enough to make a difference and small enough that everyone counts. We offer an entrepreneurial culture, where there’s less hierarchy and more action, and room for innovation. Here, you’ll have the power to drive real change and shape our path ahead. Join a place where ambition can become reality, with development and platforms that support where you want to go next. Together, we’ll help you discover your potential as we expand ours. We live day-to-day by our values: collaborative, progressive, empowering, and responsible. This means you’ll join a team which upholds mutual trust and treats each other with respect. While teamwork is at the heart of our approach to reinsurance, we don’t expect our team to think alike; at MS Re, we don’t just welcome your differences, we believe they’re essential to our success.

Does this sound like a culture you want to be part of?

In case of questions, please contact us via email: [e-mail]

Note that we will only consider applicants eligible to work in Switzerland or USA.

About us

MS Reinsurance is a global reinsurer domiciled in Switzerland. With offices in Zurich, Bermuda, London, Malaysia, Miami and New York, MS Reinsurance provides best-in-class reinsurance products and services to clients around the world. As part of the world-leading insurance group MS&AD, MS Reinsurance is a trusted, long-term partner, helping clients turn risks into opportunities through deep technical expertise and bespoke reinsurance solutions. Learn more on our website.

Why work with us

We offer an entrepreneurial culture, where there’s less hierarchy and more action, and room for innovation. Here, you’ll have the power to drive real change and shape our path ahead. MS Re is a place where ambition can become reality, with development and platforms that support where you want to go next. We live day-to-day by our values: collaborative, progressive, empowering, and responsible. This means you’ll join a team which upholds mutual trust and treats each other with respect. While teamwork is at the heart of our approach to reinsurance, we don’t expect our team to think alike; at MS Re, we don’t just welcome your differences, we believe they’re essential to our success.

Follow us on Social Media Follow us on LinkedIn and stay up to date with our company.

MS Reinsurance Candidate Privacy Notice