Exposure Analysis & Identification Strategy Lead

Bank of America; United States; On-site; USD 170,000 - 240,000; Full time

Job summary

Bank of America is looking for a seasonedExposure Analysis Operations & Identification Strategy Manager to lead a specialized team within Global Information Security. You will drive exposure analysis, shape prioritization and work with multiple teams to enhance vulnerability management and risk-based decisions.

You will collaborate with threat intelligence, security domains, and technology owners to advance capabilities, tools, and analytics, ensuring alignment with broader cyber defense

Qualifications

• 10+ years of cybersecurity experience across disciplines.
• 2+ years of leadership experience managing security programs or exposure management teams.
• Deep knowledge of exposure management methodologies, lifecycles, and frameworks (NIST, CIS, MITRE ATT&CK, CVSS).
• Experience with enterprise platforms such as Tanium, Qualys, Tenable, Rapid7, CrowdStrike Exposure Management, Microsoft Defender.
• Strong ability to communicate complex risks to executives and stakeholders.
• Solid understanding of OS, networks, cloud, web apps, APIs, containers, and enterprise infrastructure.

Responsibilities

• Lead a team of information security professionals that perform operational exposure analysis and define and execute strategy.
• Continually enhance prioritization methodologies considering exploitability, asset criticality, internet exposure and business context.
• Partner with threat intelligence, red team, application security, cloud security, endpoint security, infrastructure, and technology owners to improve vulnerability relevance.
• Define requirements for exposure analysis tooling and data platforms.
• Provide strategic guidance on exposure analysis capabilities such as exploit prediction, reachability analysis, SBOM analysis, and exploitability.
• Evaluate emerging security products and capabilities to enhance exposure identification and risk prioritization.
• Advise senior leaders on process and technology risks and strategic investment priorities.
• Drive alignment between exposure analysis and broader cyber defense programs.

Skills

Critical Thinking

Customer and Client Focus

Information Systems Management

Problem Solving

Threat Analysis

Cyber Security

Policies

Procedures

Guidelines Management

Quality Assurance

Education

Bachelor's degree in Cybersecurity or related field

Tools

Tanium

Qualys

Tenable

Rapid7

CrowdStrike Exposure Management

Microsoft Defender

Job description

Bank of America is looking for a seasonedExposure Analysis Operations & Identification Strategy Manager to lead a specialized team within Global Information Security. You will drive exposure analysis, shape prioritization and work with multiple teams to enhance vulnerability management and risk-based decisions.

You will collaborate with threat intelligence, security domains, and technology owners to advance capabilities, tools, and analytics, ensuring alignment with broader cyber defense