Director of Threat Exposure & Assurance

American Electric Power; Columbus (OH); On-site; USD 189,000 - 245,000; Full time

Job summary

American Electric Power in Columbus, OH is seeking a Director of Threat Exposure & Assurance Management to lead enterprise remediation across infrastructure, networks, applications, platforms and cloud.

This role requires broad tech knowledge and deep security, vulnerability and risk analysis expertise, with responsibility for translating findings into practical engineering and operations while balancing risk and business impact.

Qualifications

• Bachelor’s degree in computer science, engineering, information security, business or related field.
• 10+ years of relevant work experience with at least 6 years in a leadership role.
• Substantive enterprise IT engineering, operations or technology delivery leadership.
• Experience delivering and operating enterprise technology services and coordinating teams.
• Broad knowledge of enterprise infrastructure, networking, applications, platforms and cloud.
• Strong knowledge of security principles, vulnerability management, risk exposure and remediation.
• Ability to influence without direct authority and align technology owners.

Responsibilities

• Define and execute an enterprise technology remediation strategy across infrastructure, networks, apps, platforms, cloud and shared services.
• Own end-to-end remediation lifecycle with intake, technical triage, accountable-owner assignment, tracking and closure. Establish service levels by severity and asset criticality, and hold delivery teams accountable for timelines.
• Prioritize work using exploitability, active exploitation, exposure, service dependencies and business impact with clear ownership and acceptance criteria.
• Coordinate cross-team delivery with technology owners, engineering and operations. Ensure plans address testing, change and release approvals, maintenance windows and patch deployment.
• Lead the CITO response to emergency vulnerabilities and zero-day exposures in partnership with Enterprise Cybersecurity, coordinating impact assessment and timely executive reporting.
• Serve as the single, accountable security liaison between Enterprise Cybersecurity and the CITO organization.
• Operate the central hub translating security requirements into prioritized work for technology spokes and embed shared delivery accountability.
• Resolve competing remediation priorities and negotiate resource allocation with technology leaders; evaluate trade-offs across security, scalability and availability.
• Where immediate remediation isn’t feasible, coordinate compensating controls and documented exceptions through governance.
• Maintain governance for intake, escalation, exceptions and change execution with clear ownership and business context.
• Drive patching and technology lifecycle modernization, configuration hardening and identity improvements to reduce attack surface.
• Eliminate systemic causes of recurring vulnerabilities through automation, Lean practices and dashboards to expose bottlenecks and root causes.
• Define, track and report open vulnerabilities by severity and remediation performance to improve outcomes.
• Build and lead a credible hub team through hiring, coaching and succession planning.

Skills

Leadership

Security leadership

Vulnerability management

Risk analysis

Enterprise IT engineering

Cross-team collaboration

Cloud & infrastructure

Education

Bachelor’s degree in Computer Science/Engineering/Info Security

Job description

American Electric Power in Columbus, OH is seeking a Director of Threat Exposure & Assurance Management to lead enterprise remediation across infrastructure, networks, applications, platforms and cloud.

This role requires broad tech knowledge and deep security, vulnerability and risk analysis expertise, with responsibility for translating findings into practical engineering and operations while balancing risk and business impact.