Lead, Cyber Exposure & Rapid Response Orchestration

Fifth Third; Cincinnati (OH); On-site; USD 97,000 - 208,000; Full time

Job summary

Fifth Third Bank seeks a Principal, Exposure Analysis & Coordination to lead enterprise exposure response, coordinating across information security, technology, risk, and business teams. You will drive playbooks, metrics, and executive reporting while guiding automation initiatives to improve response speed and consistency.

The role emphasizes leadership during active exposure events, development of repeatable processes, and continuous program maturity.

Qualifications

• Bachelor's degree in Computer Science/Information Systems or equivalent.
• Master's degree a plus.
• Industry Standard Certifications such as CompTIA A+, CompTIA Network+, CompTIA Security+, ISC2 CISSP, and EWS are preferred.
• Eight+ years of IT work experience relevant to the position, including at least six years in a hands-on information security developmentrole.
• Extensive experience in cybersecurity, vulnerability management, incident response, security operations, technology risk, or related disciplines.
• Experience leading large-scale, cross-functional response or remediation efforts.
• Strong understanding of vulnerability and exposure management practices.
• Proven ability to influence stakeholders across a matrixed organization.
• Exceptional verbal and written communication skills.
• Experience identifying and delivering workflow automation or orchestration opportunities in vulnerability management.
• Ability to define automation requirements, acceptance criteria, controls, exception handling, and measurable outcomes in partnership with technical teams.
• Strong written and verbal communication skills, including the ability to translate complex technical risk into clear actions and executive-level summaries.

Responsibilities

• Lead the Exposure Analysis & Coordination function and serve as the primary authority for enterprise exposure response.
• Establish and maintain operating procedures, response playbooks, escalation criteria, and engagement models.
• Provide leadership and guidance during active exposure events.
• Drive enterprise-wide coordination across technology, security, risk, and business stakeholders.
• Ensure response activities remain aligned with enterprise risk priorities and regulatory expectations.
• Develop and maintain reporting that provides visibility into active exposures, response effectiveness, remediation progress, and operational trends.
• Define and monitor key performance indicators and operational metrics.
• Identify recurring themes, process gaps, and systemic issues through analysis of historical events.
• Provide executive-level reporting and recommendations to support risk-based decision making.
• Drive ongoing maturity of the program through continuous measurement and improvement.
• Lead post-event reviews and root cause analysis activities.
• Identify opportunities to reduce future exposure through process improvements, control enhancements, automation, and governance changes.
• Translate lessons learned into actionable improvements.
• Maintain and improve response playbooks, procedures, and documentation standards.
• Identify, prioritize, and implement opportunities to automate exposure intake, validation, evidence collection, status tracking, reporting, and closure activities.
• Define automation requirements and partner with security and technology teams to develop secure, reliable and scalable workflows.
• Establish controls, monitoring, and exception-handling processes to ensure automated workflows remain accurate, auditable, and aligned with risk-management expectations.
• Measure automation effectiveness and use operational data to reduce manual effort, improve response speed, and strengthen process consistency.
• Communicate effectively with technical teams, business leaders, and executive stakeholders.
• Translate technical exposure and remediation information into clear, concise updates tailored to executives and technology owners.
• Communicate changes in risk, scope, priority, dependencies, and target dates promptly, and confirm stakeholder understanding of required actions.
• Provide clear and concise status updates during active events.
• Escalate significant risks, unresolved issues, and critical decisions as appropriate.
• Build strong partnerships across security, technology, and business functions.

Skills

Python scripting

Communication

Leadership

Cross-functional collaboration

Vulnerability management

Education

Bachelor's degree in Computer Science/Information Systems

Master's degree

Industry Certifications (CompTIA A+, CompTIA Network+, CompTIA Security+, ISC2 CISSP, EWS)

Tools

JSON

CSV

SQL

Workflow orchestration tools

Dashboarding technologies

Job description

Fifth Third Bank seeks a Principal, Exposure Analysis & Coordination to lead enterprise exposure response, coordinating across information security, technology, risk, and business teams. You will drive playbooks, metrics, and executive reporting while guiding automation initiatives to improve response speed and consistency.

The role emphasizes leadership during active exposure events, development of repeatable processes, and continuous program maturity.