Information Security Analyst – Exposure Management Lead IV

Strategic Data Systems, Inc.; Cincinnati (OH); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Competitive base salary

Medical, dental, and vision insurance

Optional life and disability insurance

401(k) with company match and profit‑с

Paid vacation time

Paid Bench time

Training allowance

Referral bonuses

Job summary

Strategic Data Systems, Inc. in Cincinnati, OH, seeks an Information Security Analyst – Exposure Management Lead IV to coordinate urgent cybersecurity exposure events and drive risk reduction across technology teams.

The role combines incident response coordination, documentation, and governance; you will lead remediation tracking, stakeholder engagement, and escalation to ensure timely closure and audit-ready records.

Qualifications

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fields.
• Demonstrated ability to coordinate complex efforts involving multiple technical and business teams.
• Strong organizational, facilitation, and communication skills.
• Ability to operate effectively in fast-paced, high-visibility situations.
• Experience tracking issues, managing action plans, and driving accountability.
• Preferred: Experience supporting vulnerability response, zero-day response, cloud security, or threat intelligence activities.
• Familiarity with enterprise security tools, ticketing platforms, and technology operations.
• Experience working within a regulated industry environment.
• Security certifications such as Security+, CySA+, CISSP, CISM, GCIH, or equivalent.

Responsibilities

• Lead coordination of active exposure events from intake through closure.
• Assess enterprise exposure and coordinate validation activities across technology teams.
• Facilitate response meetings and working sessions.
• Drive timely engagement of stakeholders, subject matter experts, and decision makers.
• Ensure response activities remain organized, documented, and focused on risk reduction.
• Track remediation and mitigation activities across multiple teams.
• Maintain ownership assignments, target dates, action items, and status updates.
• Identify and elevate blockers, dependencies, and unresolved issues.
• Verify that remediation activities are completed and appropriately documented.
• Support transition of open issues to longer‑term governance processes when necessary.
• Maintain the authoritative record for active response activities.
• Document decisions, timelines, exposure assessments, status updates, and closure evidence.
• Prepare concise updates for leadership and stakeholders.
• Ensure response documentation supports audit, regulatory, and governance requirements.
• Identify situations requiring escalation to leadership, Incident Response, Risk Management, or other stakeholders.
• Support structured handoffs between teams and processes.
• Ensure continuity of ownership and accountability throughout the response lifecycle.
• Participate in post-event reviews and lessons‑learned sessions.
• Identify opportunities to improve coordination, communication, and response effectiveness.
• Contribute to updates of playbooks, procedures, templates, and response standards.

Skills

Cybersecurity

Vulnerability management

Security operations

Incident response coordination

Technology risk

Coordination across teams

Organizational skills

Communication skills

Issue tracking

Fast-paced environments

Tools

Ticketing platforms

Job description

Careers at SDS

Information Security Analyst – Exposure Management Lead IV

About This Role

For more than three decades, Strategic Data Systems (SDS) has been a software consultancy firm specializing in strategy, technology, and business transformation for Fortune 100 companies, mid-sized firms, and startups. At SDS, we empower our development teams to address our clients’ critical business challenges by leveraging cutting edge technologies. If you seek a workplace where your contributions are truly appreciated, then SDS is the company for you. Join us today to work alongside fellow development specialists and become a crucial part of our dynamic and cohesive community.

Job Title: Information Security Analyst – Exposure Management Lead IV

Location: Cincinnati, OH (Downtown)

Years of Experience: 5+

TOP SKILLS:

Must Have

• Ability to operate effectively in fast-paced, high-visibility situations
• Demonstrated ability to coordinate complex efforts involving multiple technical and business teams
• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fields
• Experience tracking issues, managing action plans, and driving accountability
• Exposure Risk and Response Coordination
• Strong organizational, facilitation, and communication skills

Nice To Have

• Experience in Financial Industry or Banking

What You’ll Do

The Lead, Exposure Management serves as an operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day‑to‑day response activities, assessing enterprise exposure, coordinating stakeholders, tracking remediation progress, and driving issues to resolution.

The Lead is expected to independently manage active exposure events while partnering closely with the Principal to ensure timely assessment, communication, escalation, and closure. This role work closely with other Leads to provide continuity, backup coverage, and support for simultaneous events.

Key Responsibilities

Exposure Response Coordination

• Lead coordination of active exposure events from initial intake through closure.
• Assess enterprise exposure and coordinate validation activities across technology teams.
• Facilitate response meetings and working sessions.
• Drive timely engagement of stakeholders, subject matter experts, and decision makers.
• Ensure response activities remain organized, documented, and focused on risk reduction.

Remediation & Mitigation Tracking

• Track remediation and mitigation activities across multiple teams.
• Maintain ownership assignments, target dates, action items, and status updates.
• Identify and elevate blockers, dependencies, and unresolved issues.
• Verify that remediation activities are completed and appropriately documented.
• Support transition of open issues to longer‑term governance processes when necessary.

Documentation & Reporting

• Maintain the authoritative record for active response activities.
• Document decisions, timelines, exposure assessments, status updates, and closure evidence.
• Prepare concise updates for leadership and stakeholders.
• Ensure response documentation supports audit, regulatory, and governance requirements.

Escalation & Handoff Management

• Identify situations requiring escalation to leadership, Incident Response, Risk Management, or other stakeholders.
• Support structured handoffs between teams and processes.
• Ensure continuity of ownership and accountability throughout the response lifecycle.

Continuous Improvement

• Participate in post-event reviews and lessons‑learned sessions.
• Identify opportunities to improve coordination, communication, and response effectiveness.
• Contribute to updates of playbooks, procedures, templates, and response standards.

Qualifications

Required

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fields.
• Demonstrated ability to coordinate complex efforts involving multiple technical and business teams.
• Strong organizational, facilitation, and communication skills.
• Ability to operate effectively in fast-paced, high-visibility situations.
• Experience tracking issues, managing action plans, and driving accountability.

Preferred

• Experience supporting vulnerability response, zero-day response, cloud security, or threat intelligence activities.
• Familiarity with enterprise security tools, ticketing platforms, and technology operations.
• Experience working within a regulated industry environment.
• Security certifications such as Security+, CySA+, CISSP, CISM, GCIH, or equivalent.

Success in This Role

Success is measured by the ability to coordinate exposure events efficiently, maintain accurate situational awareness, drive timely remediation activities, communicate effectively with stakeholders, and ensure events are resolved with clear accountability and documentation.

What You’ll Get

SDS, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

• Competitive base salary
• Medical, dental, and vision insurance coverage
• Optional life and disability insurance provided
• 401(k) with a company match and optional profit sharing
• Paid vacation time
• Paid Bench time
• Training allowance offering
• You’ll be eligible to earn referral bonuses!