Director of Cyber Exposure & CTEM Leadership

MidAmerican Energy Company; Des Moines (IA); On-site; USD 180,000 - 240,000; Full time

Job summary

MidAmerican Energy Company seeks a Director of Exposure Management to lead the enterprise cybersecurity exposure program across IT, OT, cloud, applications, and software supply chain. You will drive CTEM, external attack surface management, security assessments, and remediation governance while partnering with affiliate security teams and executive leadership.

You will establish governance, ownership, and measurable risk reduction with clear accountability.

Qualifications

• Bachelor's degree or equivalent in cybersecurity, information technology, computer science, engineering, business, or related field.
• Ten years of progressive cybersecurity, information technology risk, or related experience, including at least five years leading programs or teams.
• Professional certifications such as CISSP, CISM, CRISC, GIAC or similar credentials are preferred.

Responsibilities

• Exposure management strategy and governance aligned with objectives; define decision criteria and reporting.
• CTEM and vulnerability management lifecycle across hosts, cloud, and OT environments; ensure coverage and prioritization.
• External attack surface discovery through continuous monitoring of internet-facing assets and unknown assets.
• Security assessments and validation of exposures; improve controls and priorities.
• Remediation governance with ownership, due dates, escalation, and validation; drive risk reduction.
• Executive scorecards and dashboards highlighting risk reduction and remediation effectiveness.

Skills

Leadership

Stakeholder management

Risk-based prioritization

Executive communication

Project management

Collaboration

Analytical thinking

Problem solving

Education

Bachelor's degree or equivalent in a relevant field

Ten years of cybersecurity/IT risk experience

CISSP, CISM, CRISC, GIAC or equivalent credentials preferred

Tools

Rapid7

Cortex Xpanse

Horizon3

Microsoft security products

Axonious

Job description

MidAmerican Energy Company seeks a Director of Exposure Management to lead the enterprise cybersecurity exposure program across IT, OT, cloud, applications, and software supply chain. You will drive CTEM, external attack surface management, security assessments, and remediation governance while partnering with affiliate security teams and executive leadership.

You will establish governance, ownership, and measurable risk reduction with clear accountability.