Information Security Analyst – Exposure Management Lead IV

Software Guidance & Assistance, Inc. (SGA, Inc.); Cincinnati (OH); Hybrid; USD 110,000 - 165,000; Part time

Job summary

Software Guidance & Assistance, Inc. (SGA, Inc.) seeks an Information Security Analyst - Exposure Management Lead for a contract assignment with a premier banking client in Cincinnati, OH.

The role focuses on coordinating urgent cybersecurity exposure events, leading day-to-day response activities, and driving remediation to closure. The Lead works with multiple technology and business teams to ensure timely assessments, stakeholder engagement, and documentation for audit and governance.

Qualifications

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fields.
• Demonstrated ability to coordinate complex efforts involving multiple technical and business teams.
• Strong organizational, facilitation, and communication skills.
• Ability to operate effectively in fast-paced, high-visibility situations.
• Experience tracking issues, managing action plans, and driving accountability.

Responsibilities

• Exposure Response Coordination: Lead coordination of active exposure events from intake through closure.
• Remediation & Mitigation Tracking: Track remediation activities, ownership, dates, and status updates.
• Documentation & Reporting: Maintain the authoritative record and prepare leadership updates.
• Escalation & Handoff Management: Identify escalation needs and ensure smooth handoffs between teams.
• Continuous Improvement: Participate in post-event reviews and update playbooks and templates.

Skills

Cybersecurity coordination

Communication

Organizational skills

Incident response

Issue tracking

Tools

Security tools

Ticketing platforms

Job description

Software Guidance & Assistance, Inc., (SGA), is searching for an Information Security Analyst - Exposure Management Lead for a CONTRACT assignment with one of our premier banking clients in Cincinnati, OH, hybrid schedule.

The Lead, Exposure Management serves as an operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day-to-day response activities, assessing enterprise exposure, coordinating stakeholders, tracking remediation progress, and driving issues to resolution.

The Lead is expected to independently manage active exposure events while partnering closely with the Principal to ensure timely assessment, communication, escalation, and closure. This role works closely with other Leads to provide continuity, backup coverage, and support for simultaneous events.

Key Responsibilities

Exposure Response Coordination

• Lead coordination of active exposure events from initial intake through closure.
• Assess enterprise exposure and coordinate validation activities across technology teams.
• Facilitate response meetings and working sessions.
• Drive timely engagement of stakeholders, subject matter experts, and decision makers.
• Ensure response activities remain organized, documented, and focused on risk reduction.

Remediation & Mitigation Tracking

• Track remediation and mitigation activities across multiple teams.
• Maintain ownership assignments, target dates, action items, and status updates.
• Identify and elevate blockers, dependencies, and unresolved issues.
• Verify that remediation activities are completed and appropriately documented.
• Support transition of open issues to longer‑term governance processes when necessary.

Documentation & Reporting

• Maintain the authoritative record for active response activities.
• Document decisions, timelines, exposure assessments, status updates, and closure evidence.
• Prepare concise updates for leadership and stakeholders.
• Ensure response documentation supports audit, regulatory, and governance requirements.

Escalation & Handoff Management

• Identify situations requiring escalation to leadership, Incident Response, Risk Management, or other stakeholders.
• Support structured handoffs between teams and processes.
• Ensure continuity of ownership and accountability throughout the response lifecycle.

Continuous Improvement

• Participate in post-event reviews and lessons-learned sessions.
• Identify opportunities to improve coordination, communication, and response effectiveness.
• Contribute to updates of playbooks, procedures, templates, and response standards.

Qualifications

Required

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fields.
• Demonstrated ability to coordinate complex efforts involving multiple technical and business teams.
• Strong organizational, facilitation, and communication skills.
• Ability to operate effectively in fast-paced, high‑visibility situations.
• Experience tracking issues, managing action plans, and driving accountability.

Preferred

• Experience supporting vulnerability response, zero‑day response, cloud security, or threat intelligence activities.
• Familiarity with enterprise security tools, ticketing platforms, and technology operations.
• Experience working within a regulated industry environment.
• Security certifications such as Security+, CySA+, CISSP, CISM, GCIH, or equivalent.

Success in This Role

Success is measured by the ability to coordinate exposure events efficiently, maintain accurate situational awareness, drive timely remediation activities, communicate effectively with stakeholders, and ensure events are resolved with clear accountability and documentation.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at https://sgainc.com/.

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.