IT Security - Exposure Management Lead

CBTS; United States; Remote; USD 130,000 - 150,000; Full time

Job summary

CBTS is seeking an IT Security - Exposure Management lead to coordinate urgent cybersecurity exposure events and drive remediation to closure.

You will own day-to-day response activities, assess enterprise exposure, and partner with stakeholders across security and technology teams to ensure timely updates and risk-informed decisions.

The role emphasizes automation of exposure workflows, escalation, and clear executive communications, with a fully remote, long-term contract path.

Qualifications

• Experience delivering workflow automation or orchestration in vulnerability management.
• Ability to define automation requirements, controls, and acceptance criteria.
• Strong written and verbal communication to translate risk for executives.

Responsibilities

• Identify and implement opportunities to automate exposure intake, validation, and closure.
• Define automation requirements and collaborate with security and technology teams.
• Communicate risk updates to executives and stakeholders.
• Coordinate rapid response activities during exposure events.

Skills

Workflow automation

Vulnerability management

Executive communication

Python scripting

SQL data analysis

JSON/CSV data formats

Source control basics

Automation measurement

Generative AI capabilities

AI governance / responsible AI

Tools

Python

SQL

JSON

CSV

Git

Jira / ticketing systems

Dashboarding tools

Job description

NO (Corp-to-Corp, H1B, Sponsorship, F1, OPT) - 100% Remote - 12 Month Contract to Hire

$130k - $150K Salary or $65/hr W-2 - $85/hr

CBTS is searching for an IT Security - Exposure Management lead. The Lead, Exposure Management serves as an operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day-to-day response activities, assessing enterprise exposure, coordinating stakeholders, tracking remediation progress, and driving issues to resolution.

The Lead is expected to independently manage active exposure events while partnering closely with the Principal to ensure timely assessment, communication, escalation, and closure. This role work closely with other Leads to provide continuity, backup coverage, and support for simultaneous events.

Automation & Process Optimization

• Identify, prioritize, and implement opportunities to automate exposure intake, validation, evidence collection, status tracking, reporting, and closure activities.
• Define automation requirements and partner with security and technology teams to develop secure, reliable and scalable workflows.
• Establish controls, monitoring, and exception-handling processes to ensure automated workflows remain accurate, auditable, and aligned with risk-management expectations.
• Measure automation effectiveness and use operational data to reduce manual effort, improve response speed, and strengthen process consistency.

Stakeholder Communication & Engagement

• Communicate effectively with technical teams, business leaders
• Translate technical exposure and remediation information into clear, concise updates tailored to executives and technology owners.
• Communicate changes in risk, scope, priority, dependencies, and target dates promptly, and confirm stakeholder understanding of required actions.

Required

• Experience identifying and delivering workflow automation or orchestration opportunities in vulnerability management.
• Ability to define automation requirements, acceptance criteria, controls, exception handling, and measurable outcomes in partnership with technical teams.
• Strong written and verbal communication skills, including the ability to translate complex technical risk into clear actions and executive-level summaries.

Technical Requirements

• Hands-on proficiency with Python scripting for workflow automation, data processing, validation, and operational reporting.
• Ability to develop, test, troubleshoot, document, and maintain secure, reusable scripts with appropriate logging, error handling, and exception management.
• Experience integrating systems and working with structured data formats such as JSON and CSV.
• Working knowledge of source control and collaborative development practices.
• Ability to query, transform, and analyze operational or security data using SQL, Python data libraries, or comparable tools.
• Familiarity with security platforms, ticketing systems, workflow-orchestration tools, and dashboarding technologies used to automate and monitor exposure-management processes.
• Experience applying generative AI capabilities to vulnerability management use cases.
• Understanding of responsible AI practices, including data protection, access controls, human oversight, validation and accuracy considerations, and auditability.
• Ability to define measurable acceptance criteria and monitor AI-enabled workflows for quality, reliability, security, and operational value.

CBTS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws.