Director of Cyber Exposure Engineering

Iceberg; Dublin; On-site; EUR 150,000 - 190,000; Full time

Job summary

Iceberg in Ireland is seeking a Director-level leader to build and run a Cyber Exposure Management capability. You will report directly to the CISO and reshape how the organisation understands and reduces cyber exposure across cloud, infrastructure, identity, and external attack surface.

This role focuses on engineering-driven risk reduction, translating complex exposure into actionable risk for senior stakeholders, and driving remediation at scale with engineering and platform teams.

Qualifications

• Strong experience in exposure management, vulnerability management or security engineering.
• Deep technical understanding of cloud, infrastructure, identity and application security.
• Proven track record of driving remediation and measurable risk reduction.
• Experience building or transforming security capabilities in complex environments.
• Ability to influence across a large organisation with an engineering mindset.

Responsibilities

• Define and lead how exposure is measured, prioritised and tracked across the enterprise.
• Drive remediation at scale with engineering and platform teams to reduce exposure.
• Translate complex technical exposure into clear, actionable risk for senior stakeholders.
• Shape prioritisation and investment decisions across the organisation.
• Collaborate with engineering, architecture, cloud, identity and security teams in a cross-functional environment.

Skills

Exposure management

Vulnerability management

Security engineering

Cloud security

Identity security

Application security

Remediation

Risk reduction

Stakeholder comms

Cross-functional leadership

Job description

Iceberg in Ireland is seeking a Director-level leader to build and run a Cyber Exposure Management capability. You will report directly to the CISO and reshape how the organisation understands and reduces cyber exposure across cloud, infrastructure, identity, and external attack surface.

This role focuses on engineering-driven risk reduction, translating complex exposure into actionable risk for senior stakeholders, and driving remediation at scale with engineering and platform teams.