Cyber Exposure Response & Coordination Lead

Fifth Third Bank; United States; In loco; USD 97.000 - 208.000; Tempo pieno

Descrizione del lavoro

Fifth Third Bank seeks a Principal, Exposure Analysis & Coordination to lead the enterprise response to urgent cybersecurity exposures, coordinating across security, technology, risk, and business teams to protect the organization.

The role focuses on zero-day and non‑CVE issues, builds repeatable processes, delivers executive updates, and drives automation of exposure intake, validation, and reporting. Strong leadership and hands‑on security development experience are required.

Competenze

• Bachelor's degree in Computer Science/Information Systems or equivalent combination of education and experience. Master's degree a plus.
• Industry Standard Certifications such as, but not limited to: CompTIA A+, CompTIA Network +, CompTIA Security +, ISC2 CISSP, and EWS are preferred.
• Eight+ years of IT work experience relevant to the position, including at least six years in a hands‑on information security development role.
• Extensive experience in cybersecurity, vulnerability management, incident response, security operations, technology risk, or related disciplines.
• Experience leading large‑scale, cross‑functional response or remediation efforts.
• Strong understanding of vulnerability and exposure management practices.
• Proven ability to influence stakeholders across a matrixed organization.
• Exceptional verbal and written communication skills.
• Experience identifying and delivering workflow automation or orchestration opportunities in vulnerability management.
• Ability to define automation requirements, acceptance criteria, controls, exception handling, and measurable outcomes in partnership with technical teams.
• Strong written and verbal communication skills, including the ability to translate complex technical risk into clear actions and executive‑level summaries.

Mansioni

• Lead the Exposure Analysis & Coordination function and serve as the primary authority for enterprise exposure response.
• Establish and maintain operating procedures, response playbooks, escalation criteria, and engagement models.
• Provide leadership and guidance during active exposure events.
• Drive enterprise-wide coordination across technology, security, risk, and business stakeholders.
• Ensure response activities remain aligned with enterprise risk priorities and regulatory expectations.
• Develop and maintain reporting that provides visibility into active exposures, response effectiveness, remediation progress, and operational trends.
• Define and monitor key performance indicators and operational metrics.
• Identify recurring themes, process gaps, and systemic issues through analysis of historical events.
• Provide executive-level reporting and recommendations to support risk-based decision making.
• Drive ongoing maturity of the program through continuous measurement and improvement.
• Lead post-event reviews and root cause analysis activities.
• Identify opportunities to reduce future exposure through process improvements, control enhancements, automation, and governance changes.
• Translate lessons learned into actionable improvements.
• Maintain and improve response playbooks, procedures, and documentation standards.
• Identify, prioritize, and implement opportunities to automate exposure intake, validation, evidence collection, status tracking, reporting, and closure activities.
• Define automation requirements and partner with security and technology teams to develop secure, reliable and scalable workflows.
• Establish controls, monitoring, and exception-handling processes to ensure automated workflows remain accurate, auditable, and aligned with risk-management expectations.
• Measure automation effectiveness and use operational data to reduce manual effort, improve response speed, and strengthen process consistency.
• Communicate effectively with technical teams, business leaders, and executive stakeholders.
• Translate technical exposure and remediation information into clear, concise updates tailored to executives and technology owners.
• Communicate changes in risk, scope, priority, dependencies, and target dates promptly, and confirm stakeholder understanding of required actions.
• Provide clear and concise status updates during active events.
• Escalate significant risks, unresolved issues, and critical decisions as appropriate.
• Build strong partnerships across security, technology, and business functions.

Conoscenze

Python scripting

Vulnerability management

Incident response

Security operations

Automation

Executive communication

Formazione

Bachelor's degree in Computer Science/Information Systems

Master's degree a plus

Strumenti

SQL

JSON/CSV data formats

Version control

Workflow orchestration tools

Descrizione del lavoro

Fifth Third Bank seeks a Principal, Exposure Analysis & Coordination to lead the enterprise response to urgent cybersecurity exposures, coordinating across security, technology, risk, and business teams to protect the organization.

The role focuses on zero-day and non‑CVE issues, builds repeatable processes, delivers executive updates, and drives automation of exposure intake, validation, and reporting. Strong leadership and hands‑on security development experience are required.