SVP, Global Head of Exposure Management - Vulnerability Management

About the role

A global financial services firm is seeking a senior cybersecurity leader to define, lead and mature its enterprise-wide exposure and vulnerability management program. You will own the strategy across infrastructure, applications, cloud and identity, oversee Application Security, Red Team and Penetration Testing, and serve as the primary control owner for audits. This is an executive leadership role that calls for strong stakeholder influence, budget management and a global mindset.

Responsibilities

• Define and execute the enterprise exposure and vulnerability management strategy and roadmap
• Lead the shift from reactive scanning to proactive, risk-based exposure management
• Maintain visibility into the attack surface across external, cloud, on-prem, hybrid and identity environments
• Oversee vulnerability scanning, validation, prioritization and remediation programs
• Provide strategic oversight of Application Security, Red Team and Penetration Testing
• Govern adversarial simulations, breach and attack simulation and attack-path modelling
• Serve as control owner and primary contact for internal and external audits
• Develop and enforce standards for exposure, vulnerability and patch management
• Communicate exposure risk in business terms to executives, business leaders and traders
• Manage program budgets, resource planning and investment priorities
• Establish KPIs/KRIs, reduce MTTR and drive automation and AI-enabled tooling
• Build, mentor and lead a high-performing global team