Exposure Management Lead

CBTS; Cincinnati (OH); On-site; USD 103,000 - 117,000; Full time

Job summary

CBTS is seeking an Exposure Management Lead to serve as an operational coordinator for urgent cybersecurity exposure events at our Cincinnati onsite location. This role leads day-to-day response activities, assesses enterprise exposure, coordinates stakeholders, tracks remediation progress, and drives issues to resolution.

The Lead will independently manage active exposure events, partnering with the Principal to ensure timely assessment, escalation, and closure, and will work with other Leads

Qualifications

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, or related fields.
• Ability to coordinate complex efforts across multiple teams.
• Strong organizational, facilitation, and communication skills.
• Ability to operate in fast-paced, high-visibility situations.
• Experience tracking issues and driving accountability.

Responsibilities

• Lead coordination of active exposure events from intake to closure.
• Assess enterprise exposure and coordinate validation across technology teams.
• Facilitate response meetings and stakeholder engagement.
• Track remediation activities and maintain ownership and dates.
• Maintain the authoritative record and prepare leadership updates.
• Support handoffs and post-event reviews.

Skills

Cybersecurity

Vulnerability management

Security operations

Incident response coordination

Technology risk

Communication

Project coordination

Tools

Ticketing platforms

Enterprise security tools

Job description

Exposure Management Lead - Number of Positions: - 2 - Job Location: – Onsite - 3 Downtown Cincinnati, Ohio, 45202 - Duration: 6 Month Contract with potential renewals - NO (Corp-to-Corp, H1B, Sponsorship, OPT) - PAY: $75 - $85 per hour W-2

CBTS is searching for an Exposure Management Lead that serves as an operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day-to-day response activities, assessing enterprise exposure, coordinating stakeholders, tracking remediation progress, and driving issues to resolution.

The Lead is expected to independently manage active exposure events while partnering closely with the “Principal” to ensure timely assessment, communication, escalation, and closure. This role work closely with other Leads to provide continuity, backup coverage, and support for simultaneous events.

Responsibilities:

Exposure Response Coordination

• Lead coordination of active exposure events from initial intake through closure.
• Assess enterprise exposure and coordinate validation activities across technology teams.
• Facilitate response meetings and working sessions.
• Drive timely engagement of stakeholders, subject matter experts, and decision makers.
• Ensure response activities remain organized, documented, and focused on risk reduction.
• Track remediation and mitigation activities across multiple teams.
• Maintain ownership assignments, target dates, action items, and status updates.
• Identify and elevate blockers, dependencies, and unresolved issues.
• Verify that remediation activities are completed and appropriately documented.
• Support transition of open issues to longer-term governance processes when necessary.

Documentation & Reporting

• Maintain the authoritative record for active response activities.
• Document decisions, timelines, exposure assessments, status updates, and closure evidence.
• Prepare concise updates for leadership and stakeholders.
• Ensure response documentation supports audit, regulatory, and governance requirements.
• Identify situations requiring escalation to leadership, Incident Response, Risk Management, or other stakeholders.
• Support structured handoffs between teams and processes.
• Ensure continuity of ownership and accountability throughout the response lifecycle.
• Participate in post-event reviews and lessons-learned sessions.
• Identify opportunities to improve coordination, communication, and response effectiveness.
• Contribute to updates of playbooks, procedures, templates, and response standards.

Requirements:

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fields.
• Demonstrated ability to coordinate complex efforts involving multiple technical and business teams.
• Strong organizational, facilitation, and communication skills.
• Ability to operate effectively in fast-paced, high-visibility situations.
• Experience tracking issues, managing action plans, and driving accountability.

Preferred

• Experience supporting vulnerability response, zero-day response, cloud security, or threat intelligence activities.
• Familiarity with enterprise security tools, ticketing platforms, and technology operations.
• Experience working within a regulated industry environment.
• Security certifications such as Security+, CySA+, CISSP, CISM, GCIH, or equivalent.

Success in This Role

Success is measured by the ability to coordinate exposure events efficiently, maintain accurate situational awareness, drive timely remediation activities, communicate effectively with stakeholders, and ensure events are resolved with clear accountability and documentation.

Thank you in advance for your attention and continued support.