Strategic Director, Threat Exposure & Assurance

American Electric Power Co.; Columbus (OH); On-site; USD 189,000 - 245,000; Full time

Job summary

American Electric Power seeks a Director of Threat Exposure & Assurance Management who will lead enterprise technology remediation across infrastructure, networks, apps and cloud, aligning with cybersecurity policy and regulatory obligations. The role requires broad domain knowledge, hands-on risk analysis, and strong leadership to translate findings into practical engineering work.

You will own end-to-end remediation, set service levels, coordinate with architecture and operations, and drive

Qualifications

• 10+ years of relevant work experience with 6+ years in a leadership role.
• Proven leadership of cross-team technology execution and delivery.
• Broad knowledge of enterprise IT engineering, operations and delivery.

Responsibilities

• Define and execute an enterprise technology remediation strategy across infrastructure, networks, apps, platforms, cloud and shared services.
• Own the end-to-end remediation lifecycle: intake, triage, ownership, tracking, validation and closure.
• Establish SLAs by severity and asset criticality; hold delivery teams to timelines.
• Prioritize work using exploitability, exposure, dependencies and business impact; translate findings into actionable work.
• Coordinate cross-team delivery with technology owners, engineering and operations.
• Lead the CITO response to emergency vulnerabilities and zero-day exposures with Enterprise Cybersecurity.

Skills

Leadership

Risk analysis

Vulnerability mgmt

Security principles

Cross-team leadership

Enterprise IT

Education

Bachelor's degree

Job description

American Electric Power seeks a Director of Threat Exposure & Assurance Management who will lead enterprise technology remediation across infrastructure, networks, apps and cloud, aligning with cybersecurity policy and regulatory obligations. The role requires broad domain knowledge, hands-on risk analysis, and strong leadership to translate findings into practical engineering work.

You will own end-to-end remediation, set service levels, coordinate with architecture and operations, and drive