Senior Exposure Management Lead

Federal Reserve Bank of Boston; Boston (MA); On-site; USD 137,000 - 222,000; Full time

Job summary

Federal Reserve Bank of Richmond is seeking an Exposure Management Senior Advisor to continuously identify, assess, and reduce cyber exposures across on-premises, cloud, and hybrid environments. You will work with a Product Manager to translate strategy into features, configurations, and workflows for the Exposure Management program.

The role covers platform operation, data integration, risk analysis, governance, and vendor coordination, with a focus on delivering scalable security solutions and

Qualifications

• Strong understanding of Exposure Management concepts including attack surface management, exposure prioritization, cloud security posture, identity risk, and Exposure Management principles.
• Experience with CTEM-aligned workflows or continuous risk-reduction programs.
• Ability to analyze complex exposure data and translate it into actionable risk insights.
• Experience with exposure, vulnerability, or ASM tooling (e.g., ASM platforms, CSPM, CIEM, VM scanners, EASM tools, attack path analysis).
• Experience managing SaaS platforms, including integrations, APIs, data pipelines, and vendor relationships.
• Strong communication and stakeholder management skills with ability to work across technical and business teams.

Responsibilities

• Own the day-to-day operation and health of the Exposure Management SaaS platform, ensuring uptime, performance, and user access.
• Coordinate integration of exposure data sources including vulnerability scanners, CSPM, CIEM, EASM, asset inventories, and threat intelligence feeds.
• Design and optimize workflows for exposure discovery, risk scoring, validation, remediation assignment, and tracking.
• Discover, map, and inventory external and internal attack surfaces across cloud, on premise, network, application, and SaaS environments.
• Monitor asset changes and ensure continuous visibility into evolving environments.
• Produce risk ratings and exposure narratives that business units can understand and act on.
• Contribute to scoping CTEM cycles and defining focus areas.
• Maintain standards, processes, and documentation related to exposure management activities.
• Provide clear metrics and reporting to leadership on exposure trends, risk posture, and remediation progress.
• Support integration of exposure management into broader security architecture and operational security processes.
• Serve as a liaison with the SaaS platform vendor, managing support escalations, feature requests, and roadmap discussions.
• Represent organizational needs and use cases in vendor product development conversations.

Skills

Exposure Management

CTEM workflows

Data analysis

ASM tooling

SaaS platform management

Stakeholder management

Communication

Tools

ASM platforms

CSPM

CIEM

EASM

VM scanners

Job description

Federal Reserve Bank of Richmond is seeking an Exposure Management Senior Advisor to continuously identify, assess, and reduce cyber exposures across on-premises, cloud, and hybrid environments. You will work with a Product Manager to translate strategy into features, configurations, and workflows for the Exposure Management program.

The role covers platform operation, data integration, risk analysis, governance, and vendor coordination, with a focus on delivering scalable security solutions and