CTEM Consultant

Oliver James Group; United States; Remote; USD 114,000 - 162,000; Full time

Job summary

Oliver James Group is seeking a Continuous Threat Exposure Management (CTEM) Specialist to help design and operate an enterprise-wide CTEM capability for a major Insurance client. The role is remote with contract-to-hire potential, focused on reducing real-world cyber exposure.

The successful candidate will lead the CTEM strategy, integrate vulnerability management, attack surface data and threat intelligence, and drive risk-based prioritisation and remediation across teams.

Qualifications

• Proven CTEM exposure management experience or related cybersecurity discipline.
• Strong risk-based exposure prioritisation and security validation skills.
• Experience integrating security tools, data and workflows across teams.
• Ability to translate findings into actionable business risk reductions.
• Experience working with senior security stakeholders in complex environments.

Responsibilities

• Develop and evolve CTEM strategy, roadmap and operating model.
• Establish core CTEM stages: scoping, discovery, prioritisation, validation and mobilisation.
• Combine exposure data across vulnerability management, external attack surface management, cloud security, identity and threat intelligence.
• Implement risk-based prioritisation considering exploitability and business criticality.
• Validate exposures through attack-path analysis and security validation.
• Establish remediation workflows with infrastructure, cloud, application and security teams.
• Define programme metrics, governance and reporting to demonstrate reductions in cyber risk.
• Advise CISO and senior stakeholders on capability gaps and investments.

Skills

CTEM

Exposure prioritisation

Vulnerability management

Security validation

Stakeholder engagement

Tool integration

Tools

Vulnerability scanning tools

Attack surface management tools

Threat intelligence platforms

Job description

Continuous Threat Exposure Management (CTEM) Specialist

Remote - C2H - Jan/Feb conversion to FTE

Circa $100 per hour

Cybersecurity | Programme Development & Operationalisation

We're looking for a Continuous Threat Exposure Management (CTEM) specialist to help develop and operationalise an enterprise-wide approach to identifying, validating, prioritising and remediating cyber exposures for an Insurance client.

Working closely with the CISO, you'll help establish a continuous, risk-led security capability that goes beyond traditional vulnerability management, connecting people, processes and technologies to reduce the organisation's real-world exposure to cyber threats.

What you'll be doing

• Develop and evolve the organisation's CTEM strategy, roadmap and operating model.
• Establish or mature the five core CTEM stages: scoping, discovery, prioritisation, validation and mobilisation.
• Bring together exposure data across vulnerability management, external attack surface management, cloud security, identity and threat intelligence.
• Implement risk-based prioritisation that considers exploitability, business criticality and attack paths.
• Validate exposures through attack-path analysis, penetration testing, adversary simulation and other security validation techniques.
• Establish effective remediation workflows with infrastructure, cloud, application and security teams.
• Define programme metrics, governance and reporting to demonstrate measurable reductions in cyber risk.
• Advise the CISO and senior stakeholders on capability gaps, technology investments and continuous improvement.

What we're looking for

• Demonstrable experience in CTEM, continuous exposure management, attack surface management or a closely related cybersecurity discipline.
• Strong understanding of risk-based exposure prioritisation, vulnerability management and security validation.
• Experience integrating security tools, data and workflows to improve visibility and remediation.
• The ability to translate technical findings into actionable business risk reduction.
• Experience working with senior security stakeholders and influencing teams across a complex technology environment.
• A practical, delivery-focused approach to developing and improving security capabilities.

Highly desirable

• Experience building a CTEM or enterprise exposure management programme from the ground up.
• Experience defining a target operating model, selecting and integrating tooling, and establishing programme governance.
• A track record of demonstrably improving exposure management maturity and reducing exploitable risk.

The ideal candidate combines strong technical security knowledge with the ability to turn strategy into an effective, continuously operating capability.