Senior Director, Exposure & Vulnerability Risk Strategy

WTW; City Of London; Presencial; GBP 140.000 - 210.000; Jornada completa

Descripción de la vacante

WTW seeks a Senior Director of Exposure & Vulnerability Management to lead the enterprise vulnerability program. You will own strategy, execution and evolution across exposure management, aligning with SAST/DAST/SCA and risk intelligence, with focus on prioritization and measurable risk reduction.

You will partner with Corporate, Cloud, Product, Platform Engineering and Risk teams to translate findings into prioritized remediation, executive reporting and ongoing improvements across technology

Formación

• Extensive leadership experience overseeing enterprise exposure and vulnerability management.
• Experience aligning security findings with remediation priorities and executive reporting.
• Strong collaboration with CIO/CTO teams and risk/compliance stakeholders.
• Proven ability to define strategy, budget and multi-year roadmaps.

Responsabilidades

• Define and own enterprise exposure & vulnerability management strategy and roadmap.
• Lead global teams in discovery, validation, prioritization, tracking and remediation.
• Establish risk-based prioritization using exploitability and threat intelligence.
• Align secure development practices (SAST/DAST/SCA) with risk management.
• Provide executive reporting and oversight of budget and investments.

Conocimientos

Exposure management

Vulnerability management

CTEM

Strategic leadership

Stakeholder management

Herramientas

SAST

DAST

SCA

EPSS

Descripción del empleo

WTW seeks a Senior Director of Exposure & Vulnerability Management to lead the enterprise vulnerability program. You will own strategy, execution and evolution across exposure management, aligning with SAST/DAST/SCA and risk intelligence, with focus on prioritization and measurable risk reduction.

You will partner with Corporate, Cloud, Product, Platform Engineering and Risk teams to translate findings into prioritized remediation, executive reporting and ongoing improvements across technology