Lead Continuous Threat Exposure Management

A 1L Realization (Pty) Ltd; Gauteng; In loco; ZAR 900.000 - 1.800.000; Tempo pieno

Descrizione del lavoro

A 1L Realization (Pty) Ltd in South Africa seeks a Lead Continuous Threat Exposure Management professional for a 12-month contract. The role will establish, operate and continuously improve exposure management across critical services, cloud and on-premise environments, delivering a unified risk view and guiding remediation.

The position requires extensive experience in vulnerability and exposure management, security testing and threat-informed prioritisation, with effective executive reporting

Competenze

• Experience leading vulnerability management or exposure management programs.
• Knowledge of risk reduction and threat prioritisation.
• Experience coordinating remediation with senior stakeholders.

Mansioni

• Lead the establishment, operation and continuous improvement of exposure management.
• Coordinate remediation, validation and exception governance.
• Provide executive reporting and risk-based views to stakeholders.

Conoscenze

Vulnerability management

Exposure management

Threat-informed prioritisation

Executive reporting

Formazione

Degree in cybersecurity / related field

Descrizione del lavoro

SUMMARY:

Our client in the telecommunications sector is looking for a Lead Continuous Threat Exposure Management on contract duration of 12 months. Role Purpose Lead the establishment, operation and continuous improvement of Continuous Threat Exposure Management capability. The role is accountable for providing a unified, risk based view of cyber exposure across critical business services, infrastructure, telecommunications platforms, cloud environments, applications, APIs, identities, data, AI systems and approved third parties. The role will drive the complete exposure lifecycle, from discovery and prioritisation through remediation, validation, exception management and executive reporting, with success measured by verified risk reduction rather than vulnerability volumes.

POSITION INFO:

Success Measures Coverage of priority business services and critical technology assets Reduction in critical attack paths and known-exploited exposures Remediation performance against approved targets Reduction in overdue, recurring and reopened exposures Percentage of material exposures with accountable owners Quality and timeliness of risk acceptances Successful independent validation of exposure closure Demonstrable and sustained reduction in residual cyber risk Experience and Qualifications Relevant degree or equivalent experience in cybersecurity, technology, engineering or risk management. Significant experience leading vulnerability management, exposure management, cyber-risk reduction, security testing or a related enterprise security capability. Strong knowledge of infrastructure, cloud, identity, application, API, network and telecommunications security. Experience coordinating remediation across complex technology and business environments. Strong understanding of attack-path analysis, threat-informed prioritisation, security assurance and exception governance. Experience managing executive reporting, governance forums, senior stakeholders and service providers. Relevant certification such as CISSP, CISM, CRISC, CCSP, OSCP or GIAC is advantageous. Knowledge of NIST CSF 2.0, MITRE ATT&CK, CISA KEV and FIRST EPSS is advantageous.