Strategic Director of Exposure & Vulnerability Management

WTW; Charlotte (NC); On-site; USD 180,000 - 240,000; Full time

Job summary

WTW seeks a Senior Director of Exposure & Vulnerability Management to lead the vulnerability program across the enterprise, aligning CTEM, SAST/DAST/SCA, and risk intelligence with business impact.

You will partner with Technology, Cloud Operations, Product, Risk, and Audit to translate findings into prioritized remediation, governance, and measurable risk reduction.

As a senior leader, you will drive strategy, budget, and global teams, delivering executive reporting and continuous improvement.

Qualifications

• 10+ years in information security, incl. 7+ years leading enterprise security programs.
• Experience leading multi-disciplinary, geographically distributed teams.
• Deep understanding of vulnerability management, app security, cloud security.
• Familiar with risk-based prioritization, threat intel, exposure validation.
• Ability to move program from operational to strategic, outcomes.
• Data-driven with metrics to influence decisions.
• Transform programs with tool rationalization and vendor mgmt.
• Experience in regulated industries and engaging with regulators.
• Able to operate at strategic and execution levels and translate vision.
• Exceptional communication to executives and Board.

Responsibilities

• Define and own enterprise exposure & vulnerability management strategy and roadmap.
• Operationalize continuous exposure & vulnerability lifecycle aligned to CTEM.
• Track vulnerabilities via risk-based prioritization and business impact.
• Establish ownership models with technology teams for remediation.
• Own the operating plan and budget for exposure & vulnerability management.
• Lead global vulnerability operations and remediation mobilization.
• Coordinate with Security Ops, Incident Response and Technology.
• Lead response to critical vulnerabilities, including on-call coordination.
• Drive modernization of tooling, workflows and vendor management.

Skills

Information security leadership

Leadership experience

Vulnerability management

Risk-based prioritization

Strategic leadership

Data-driven mindset

Transformation & vendor mgmt

Regulatory experience

Strategic/execution balance

Executive communication

Education

Bachelor's degree in Computer Science/Information Security or related

Tools

ServiceNow

CTEM tooling

NIST CSF

CISSP/CISM/CRISC (certs)

Job description

WTW seeks a Senior Director of Exposure & Vulnerability Management to lead the vulnerability program across the enterprise, aligning CTEM, SAST/DAST/SCA, and risk intelligence with business impact.

You will partner with Technology, Cloud Operations, Product, Risk, and Audit to translate findings into prioritized remediation, governance, and measurable risk reduction.

As a senior leader, you will drive strategy, budget, and global teams, delivering executive reporting and continuous improvement.