Cyber Manager

A.P. Moller Maersk; Bengaluru; On-site; INR 3,500,000 - 5,200,000; Full time

Job summary

A.P. Moller Maersk is seeking a Cyber Manager for Threat Exposure Management to lead enterprise security programs, drive remediation, and advance threat exposure practices across IT, OT, cloud, and AI environments.

The role emphasizes people management, strategic security planning, and effective stakeholder engagement to mitigate risk and strengthen operational resilience.

Qualifications

• Extensive hands-on experience in Threat Exposure Management and Vulnerability Management across large environments.
• Experience leading security teams and guiding strategic security roadmaps.

Responsibilities

• Lead Threat Exposure and Vulnerability Management Analysts and mentor security professionals.
• Develop and drive the function’s technical vision, strategy, and roadmap.
• Engage with stakeholders across the organization to align risk with business objectives.
• Demonstrate deep knowledge of vulnerability management, threat exposure, and remediation governance.
• Collaborate with IT, Cloud, Data, and Identity domains to integrate security controls and DevSecOps practices.
• Promote secure coding practices and secure software development lifecycle in CI/CD and IaC environments.
• Foster a culture of security awareness, governance, and proactive risk reduction.

Skills

Threat Exposure Management

Vulnerability Management

Defensive Security

Offensive Security

Application Security

Cloud Security

OT/ICS Security

Data Security

Identity Security

AI/ML Security

CI/CD Security

IaC Security

Education

Certifications: CISSP, CISM, GIAC (GMON, GICSP, GWEB, GCSA)

Tools

VM

ASM/EASM

AppSec tooling

CI/CD security tooling

IaC security tooling

Job description

Job Role- Cyber Manager

The Cyber Manager for Threat Exposure Management is responsible for leading [as a people manager] the enterprise-wide operations, and continual evolution of the organisations threat exposure management lifecycle and reduction programmes within a given scope, and reports to the Senior Cyber Manager Threat Exposure Management. This role ensures that exposures across infrastructure, applications, identities, cloud, OT/IoT, AI, and third-party ecosystems are proactively identified, prioritised, validated, and remediated in alignment with business risk and operational resilience requirements.

The successful candidate must demonstrate a strong track record in leading [also as a people manager] high-performing technical teams and fostering a culture of technical excellence. They will bring market-proven know-how to establish industry-driven threat exposure management practices, whilst effectively influencing stakeholders across the organisation. The candidate must also bring advanced technical expertise in threat exposure, vulnerability management and defensive and offensive security, with the ability to lead deep technical discussions and conduct complex analysis across some of the following technologies: IT, OT, Cloud, Applications, Data, Identities, Code and AI-driven environments.

Role & responsibilities

Professional Background

810+ years of progressive experience in enterprise cyber security with demonstrable in-depth technical expertise across Threat Exposure Management, Vulnerability Management, Defensive and Offensive Security, Application Security, Cloud Security, OT/ICS Security, Data and Identity Security, and AI/ML Security. Experience must span large-scale, heterogeneous environments with complex technology stacks. Certifications such as CISSP, CISM and GIAC (GMON, GICSP, GWEB, GCSA) are advantageous, but equivalent hands-on technical capability, advanced analytical proficiency, and a strong record of continuous learning and practical security training are essential.

Leadership & Communication

• Proven experience in directly managing a team of Threat Exposure and Vulnerability Management Analysts, including mentoring, developing and guiding security professionals within a collaborative, high-performing environment.


• Strong strategic and visionary capabilities, with the ability to co-develop and drive the function’s technical vision, strategy and roadmap in alignment with business objectives and the organisation’s threat appetite. Technical Expertise


• Deep knowledge of vulnerability management, threat exposure management, exploit development concepts, exposure validation, and remediation governance.


• Strong understanding of common security vulnerabilities, attack vectors, and security testing frameworks, such as OWASP, MITRE ATT&CK, CVE / CVSS, and NIST SP 800-53.


• Robust expertise across technical domains such as IT, OT, Cloud, network security, container environments, and identity-centric security. Proven capability in AppSec, secure coding practices, CI/CD and IaC security, and DevSecOps tooling.


• Solid understanding of AI/ML architecture, AI security threats, LLM exposure risks, and secure integration patterns.


• Hands-on expertise with tooling in different landscapes: VM, ASM/EASM, AppSec, Cloud, OT, Data, Identity, AI. Stakeholder Engagement & Culture


• Serve as the advisor and central point of contact for all Threat Exposure and Vulnerability Management matters across the organisation within a given scope.


• Build strong relationships with industry partners, vendors, and the wider technology ecosystem to incorporate external expertise, benchmark performance, and stay ahead of emerging threats and vulnerability trends.


• Develop trusted relationships across Cyber, Portfolio teams, Engineering, and Business functions, anchored in transparency, accountability, and the organisation’s core values.


• Lead by example in strengthening collaboration, breaking down silos, and cultivating high-performing cross-functional networks.


• Promote a values-driven culture that embraces diversity, inclusion, and collective ownership of cyber risk.


• Champion staff education, awareness, and secure behaviours to embed a proactive, cyber-aware mindset across the organisation.


• Foster a responsive, delivery-focused culture that partners effectively with Technology and Business units to drive timely resolutions and value-led security outcomes.