Exposure Manager

Bank Julius Bär & Co. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Bank Julius Baer & Co. Ltd. is seeking an Exposure Manager in Singapore to support proactive security testing and exposure mitigation.

You will coordinate penetration testing engagements, manage escalation and remediation, and liaise with internal teams and external vendors to ensure regulatory and security standards are met. The role offers mentorship from senior security experts and opportunities to grow within a global security program, collaborating with teams across international hubs and

Qualifications

• Bachelor’s degree in computer science, information security, or equivalent practical experience.
• 3–5 years in IT/security governance, compliance, or vulnerability management, or technical project management.
• Experience using ServiceNow or similar ITSM/GRC platforms.

Responsibilities

• Coordinate penetration testing engagements and manage exposure mitigation activities.
• Act as central point for exposure management, liaising with internal teams and vendors.
• Organize scoping sessions to align business needs with security best practices.
• Oversee external penetration testing partners, review statements of work, track deliverables.
• Provide regular progress updates on testing and remediation status within SLAs.
• Support response processes for infrastructure vulnerabilities and configuration deviations.

Skills

Strong organizational skills

Excellent communication

Professional English

Education

Bachelor's degree in computer science or equivalent

Tools

ServiceNow

Job description

## Exposure ManagerApplylocations: Singaporetime type: Full timeposted on: Posted Todaytime left to apply: End Date: November 3, 2026 (30+ days left to apply)job requisition id: r-19258At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.GENERAL DESCRIPTION As an Exposure Manager within our Security Compliance Competence Centre, you will play a key role in supporting our proactive security testing program and exposure mitigation activities. You will coordinate the execution of penetration testing engagements, ensuring our applications and infrastructure remain resilient against evolving cyber threats. You will manage key processes within our Exposure Management initiative: providing process support and guidance to the technology teams, reporting adherence to the management, and working with peers internationally to maintain adherence to standards, guidelines, and local regulations. This position offers mentorship from senior security experts and clear growth opportunities.## **YOUR CHALLENGE****KEY FEATURES AND ACCOUNTABILITIES****Process Management*** Manage multiple penetration testing engagements from initiation through reporting and remediation tracking. Define objectives, timelines, and resources in collaboration with application owners and technical experts**Stakeholder Engagement*** Act as the central point of contact for exposure management activities, liaising with internal teams (Application Owners, Development Leads, Product Owners) and external vendors**Requirements Gathering*** Organize and lead scoping sessions to align business needs, technical constraints, and security best practices**Vendor Coordination*** Oversee external penetration testing partners – review statements of work, track deliverables, and ensure adherence to timelines**Logistics & Preparation*** Coordinate pre-engagement activities such as access provisioning, environment setup, and documentation readiness**Expert Liaison*** Collaborate with senior security specialists to validate scopes, clarify findings, and escalate complex technical issues**Escalation & Coordination*** Act as the central point for questions and escalations related to EM process. Communicate effectively across teams and escalate when necessary**Teamwork*** You will work closely with other EM managers and technical experts across international hubs, ensuring processes run smoothly and stakeholders are supported**Reporting & Communication*** Provide regular updates on testing progress, findings, and remediation status. Respond to inquiries within agreed SLAs (e.g., acknowledgement within 1 business day, next steps within 2 business days)**Exposure Management*** Support the response process for infrastructure vulnerabilities and configuration deviations tracked in ServiceNow Vulnerability Response (VR), ensuring timely and audit-compliant resolution**Regulatory Responsibilities &/OR Risk Management*** Demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations## **YOUR PROFILE****SKILLS REQUIREMENTS****Personal and Social*** Strong organizational and time-management skills; ability to manage multiple projects simultaneously* Excellent communication and stakeholder management skills, with a proactive and solution-oriented mindset* Professional proficiency in English**Professional and Technical*** Bachelor’s degree in computer science, information security, or equivalent practical experience* 3–5 years of experience in IT/security governance, compliance, or vulnerability management, or technical project management* Experience using ServiceNow or similar ITSM/GRC platforms**Regulatory*** Foundational understanding of security configuration standards (e.g., OWASP Top 10, CIS benchmarks) and vulnerability management principles* Familiarity with penetration testing phases and methodologies**Optional Requirements (Considered a Plus):*** Experience coordinating penetration testing or security assessment projects* Familiarity with vulnerability scanning tools (e.g., Nexpose) and exposure management workflows* Experience working with external vendors* IT or Security certifications (e.g., Security+, CISM, CISSP, CEH, OSCP)* Basic understanding of infrastructure security concepts* Experience in financial services or regulated environmentsWe are looking forward to receiving your full job application through our online application tool. Further interesting job opportunities can be found on our Career site.