Cyber Exposure Leader - AI Security & Vulnerability

The Depository Trust & Clearing Corporation (DTCC); Jersey City (NJ); Hybrid; USD 170,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation

Health insurance

Pension benefits

Hybrid work model (3 onsite/2 remote)

Job summary

DTCC seeks an experienced leader to guide cyber exposure management initiatives, overseeing vulnerability and application security across cloud and on-prem environments. You will drive AI-assisted security testing, governance, and risk-based prioritization while mentoring delivery teams.

The role emphasizes collaboration with engineering, architecture, risk, and control functions to embed secure practices into the software lifecycle, with a hybrid onsite/remote work model.

Qualifications

• Minimum of 8 years of related experience.
• Bachelor’s degree preferred and/or equivalent experience.

Responsibilities

• Lead design and delivery of cyber exposure management capabilities across data, cloud, and applications.
• Support AI-enabled security scanning programs and orchestration strategies.
• Advance AI VDR operating model with continuous and targeted deep-assurance testing for higher-risk systems.
• Establish repeatable methods to validate findings and prioritize remediation.
• Partner with cross-team groups to integrate security scanning into development workflows.

Skills

Cyber exposure management

Vulnerability management

Application security

Security engineering

AI security testing

Education

Bachelor’s degree preferred

Tools

CI/CD security tooling

Security platforms evaluation

Job description

DTCC seeks an experienced leader to guide cyber exposure management initiatives, overseeing vulnerability and application security across cloud and on-prem environments. You will drive AI-assisted security testing, governance, and risk-based prioritization while mentoring delivery teams.

The role emphasizes collaboration with engineering, architecture, risk, and control functions to embed secure practices into the software lifecycle, with a hybrid onsite/remote work model.