Director, Cyber Exposure & Vulnerability Management (Cybersecurity)

TL;DR

Director, Cyber Exposure & Vulnerability Management (Cybersecurity): Leading enterprise vulnerability remediation and exposure analysis across a large regulated banking environment with an accent on risk prioritization, governance, and cross-functional coordination. Focus on coordinating responses to zero-day vulnerabilities, emerging threats, cloud and third-party exposures, and translating cyber risk data into executive decisions.

Location: Virtual role based in the United States

Salary: $121,900–$262,100 annual base pay, plus eligibility for incentive compensation.

Company

hirify.global is a large financial services organization providing banking products and services to customers and communities across the United States.

What you will do

• Lead the enterprise vulnerability remediation program, including governance, reporting, escalation, prioritization, and stakeholder coordination.
• Direct the Exposure Analysis & Coordination function and coordinate responses to zero-day vulnerabilities, emerging threats, vendor advisories, and cloud or third-party exposures.
• Translate vulnerability and exposure data into risk-based decisions, remediation priorities, business impact assessments, and executive communications.
• Define strategy, roadmaps, metrics, operating processes, playbooks, and maturity objectives for remediation and exposure management.
• Partner with Information Security, Technology, Risk Management, application, infrastructure, cloud, and security teams.
• Lead and develop security engineers and analysts while strengthening accountability, collaboration, and continuous improvement.

Requirements

• 10+ years of experience in cybersecurity, technology risk, security operations, vulnerability management, or related disciplines.
• Experience leading enterprise-scale remediation, risk reduction, security operations, or response coordination programs.
• Strong knowledge of vulnerability management, risk prioritization, cyber risk governance, and cross-functional program leadership.
• Experience presenting to senior and executive leaders, managing stakeholders, and influencing outcomes without direct authority.
• Experience managing teams, budgets, priorities, and strategic initiatives.
• Must be based in the United States for this virtual role.

Nice to have

• Experience in a large regulated financial services organization and familiarity with FFIEC or PCI requirements.
• Experience with regulatory examinations, audits, enterprise risk governance, security analytics, asset management, GRC, or workflow platforms.
• Experience with cloud, infrastructure, application, and third-party technology security.
• Agile or SAFe experience and certifications such as CISSP, CISM, CRISC, or GIAC.

Culture & Benefits

• Comprehensive benefits supporting physical, financial, emotional, and social well-being.
• Base compensation varies by experience, skills, education, and geographic location.
• Eligibility for incentive compensation based on company, business-line, and individual performance.
• Inclusive culture and equal employment opportunity across employment decisions.