Exposure Analysis & Identification Strategy Leader

National Black MBA Association; Denver, Northern (CO, KY); Hybrid; USD 155,000 - 220,000; Full time

Job summary

Bank of America is seeking an Exposure Analysis Operations & Identification Strategy Manager to lead a specialized team within GIS Cyber Security Assurance. You will drive strategic initiatives to enhance exposure analysis capabilities and partner across GIS and Global Technology to align security priorities with business needs.

The role requires CISSP or equivalent, 10+ years in security, and 2+ years of leadership.

Qualifications

• Bachelor's degree in cybersecurity or related field is required.
• CISSP or equivalent certification is preferred.
• 10+ years of progressive cybersecurity experience across related disciplines.
• 2+ years of leadership managing security programs or teams.
• Deep knowledge of exposure management lifecycles and frameworks.

Responsibilities

• Lead a team performing operational exposure analysis and strategy execution.
• Improve prioritization with exploitability, asset criticality, and risk context.
• Collaborate with threat intel, app security, cloud, and infra teams for actionable findings.
• Define tooling requirements for exposure analysis and data platforms.
• Advise senior leaders on risks and strategic investments.

Skills

CISSP certification

Cybersecurity experience

Leadership experience

Threat intelligence

Exposure analysis

Executive communication

Analytical thinking

Security frameworks (NIST/CIS/ATT&CK/C

Cloud & app security

Policy & governance

Education

Bachelor's degree in Cybersecurity or related field

Tools

Tanium

Qualys

Tenable

Rapid7

CrowdStrike Exposure Management

Microsoft Defender

Job description

Bank of America is seeking an Exposure Analysis Operations & Identification Strategy Manager to lead a specialized team within GIS Cyber Security Assurance. You will drive strategic initiatives to enhance exposure analysis capabilities and partner across GIS and Global Technology to align security priorities with business needs.

The role requires CISSP or equivalent, 10+ years in security, and 2+ years of leadership.