Exposure Operations Lead for Risk & Resilience

01400 Rocky Mountain Support Services; Jacksonville (FL); Remote; USD 170,000 - 200,000; Full time

Benefits offered by this job

Health and welfare insurance

Paid holidays vacations and sick time

401(k) plan

Employee stock purchase plan

Job summary

FNF is seeking a Director, Exposure Operations to lead the design, implementation, and continuous improvement of the enterprise Exposure Management operating model. Reporting to the VP, Security Platforms & Exposure Management, this role oversees Exposure Intelligence, Exposure Remediation & Tracking, and Exposure Validation, ensuring risk reduction drives prioritized action.

The Director will define governance, processes, and workflows across infrastructure, applications, identity, attack

Qualifications

• Bachelor’s degree or equivalent experience.
• Experience in technical vulnerability management or exposure management.
• Ability to design scalable processes and governance.
• Experience reporting metrics to executive leadership.

Responsibilities

• Lead the exposure management operating model and prioritization.
• Design end-to-end exposure lifecycle: intake, analysis, remediation, validation.
• Set governance across infrastructure, applications, identity, and attack surfaces.
• Develop multi-year roadmaps aligned with enterprise security objectives.
• Drive risk-based remediation decisions and accountability across teams.
• Produce exposure analytics and executive reporting on risk and progress.

Skills

Exposure management

Vulnerability analysis

Security operations

Stakeholder management

Roadmap development

Education

Bachelor’s degree or equivalent

Job description

FNF is seeking a Director, Exposure Operations to lead the design, implementation, and continuous improvement of the enterprise Exposure Management operating model. Reporting to the VP, Security Platforms & Exposure Management, this role oversees Exposure Intelligence, Exposure Remediation & Tracking, and Exposure Validation, ensuring risk reduction drives prioritized action.

The Director will define governance, processes, and workflows across infrastructure, applications, identity, attack