Senior VP, Exposure & Vulnerability Management

GIC; New York (NY); Hybrid; USD 178,000 - 255,000; Full time

Job summary

GIC is seeking an SVP Exposure Management to lead and mature the firm’s exposure and vulnerability management program across cloud, on-premises, and hybrid environments. You will define strategy, align with risk appetite, and drive remediation with cross-functional teams in a global, long-term investment context.

You will lead threat intelligence integration, risk-based prioritization, and validation activities, while advancing automation and AI-enabled controls.

Qualifications

• 15+ years in cybersecurity, with at least 7 years in senior leadership overseeing exposure/vulnerability programs.
• Proven track record building or maturing enterprise-scale exposure management.
• Knowledge of financial services regulation and technology risk management.

Responsibilities

• Define and execute exposure and vulnerability management strategy aligned with risk appetite and regulatory requirements.
• Establish a roadmap for continuous threat management with automation and threat intelligence integration.
• Maintain visibility of the enterprise attack surface across external, cloud, on-prem, and hybrid environments.
• Lead scanning, assessment, and reporting with consistent standards and timely remediation.
• Prioritize vulnerabilities based on risk context, exploitability and business impact.
• Use validation methods like breach and attack simulation to confirm real-world risk.
• Collaborate with technology teams to embed best practices and drive remediation ownership.
• Coordinate with risk and audit teams to align with broader risk management practices.
• Communicate complex exposures to enable risk-based decisions at all levels of the firm.
• Develop and manage standards for exposure, vulnerability, and patch management.
• Track program maturity with KRIs and KPIs and lead a high-performing team.
• Drive continual process and tooling improvements to reduce mean-time-to-remediate.

Skills

Leadership

Exposure management

Vulnerability management

Threat intelligence

Risk management

Communication

Stakeholder management

Regulatory knowledge

AI & automation

People management

Education

Degree in Computer Science / Information Security

Certifications: CISSP / CISM / CRISC

Job description

GIC is seeking an SVP Exposure Management to lead and mature the firm’s exposure and vulnerability management program across cloud, on-premises, and hybrid environments. You will define strategy, align with risk appetite, and drive remediation with cross-functional teams in a global, long-term investment context.

You will lead threat intelligence integration, risk-based prioritization, and validation activities, while advancing automation and AI-enabled controls.