Exposure Risk Lead - Vulnerability Management (Remote)

rollsroyce

United States

Hybrid

USD 123,000 - 199,000

Full time

6 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Relocation assistance

Job summary

Rolls-Royce is seeking a Head of Exposure Management to lead the Vulnerability Management program, maturing processes across enterprise environments and delivering risk-based remediation. You will work with infrastructure, cloud, security, and business teams to drive policy and executive-level reporting.

The role requires 5+ years in exposure management or related cybersecurity disciplines, with a US citizenship or permanent residence status.

Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field is required.
Master's degree in Cybersecurity, Computer Science, Information Technology, or related field is preferred.
JD/PhD is considered a plus.

Responsibilities

Develop, implement, and maintain the enterprise Exposure Management Program.
Establish Exposure management policies, standards, procedures, and service level objectives.
Oversee enterprise vulnerability scanning activities across on-premises, cloud, endpoint, network, and application environments.
Ensure Exposure assessment coverage across all managed assets.
Evaluate newly disclosed vulnerabilities and assess organizational exposure.
Lead Exposure triage and prioritization efforts.
Develop executive-level reporting and dashboards that communicate organizational risk exposure.
Present vulnerability trends, remediation performance, and risk metrics to security leadership and business stakeholders.
Partners with Threat Intelligence and Security Operations teams to prioritize vulnerabilities actively targeted by threat actors.