Director, Cyber Exposure – Vulnerability Management

Job not on LinkedIn

🔥 0 minutes ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $121.9k - $262.1k / year

⏰ Full Time

🔴 Lead

👔 Director

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fifth Third Bank

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1858

🛡️ Insurance

💼 Consulting

📦 Logistics

Insurance • Consulting • Logistics

Fifth Third Bank is a diversified financial services company offering a wide range of banking and financial products and services. It provides personal banking solutions such as checking and savings accounts, credit and debit cards, and identity theft protection. Borrowers can access various loans and mortgage options, while investors benefit from investment products like ETFs, mutual funds, and stocks. The bank also provides a robust set of services for businesses and commercial clients, including cash management, treasury management, and specialized lending solutions. Additionally, Fifth Third offers wealth management services with private banking, trust, and estate services. Customers can benefit from Fifth Third's online and mobile banking platforms, enabling them to bank anywhere at any time. Fifth Third Bank is focused on delivering seamless banking experiences with a strong emphasis on customer convenience and security.

📋 Description

• Lead the enterprise vulnerability remediation program, including governance, reporting, escalation, and stakeholder coordination • Partner with application, infrastructure, cloud, and security teams to drive timely risk reduction • Establish remediation priorities, performance metrics, and service-level expectations • Support audits, regulatory examinations, and enterprise risk governance activities • Lead the Exposure Analysis & Coordination function • Coordinate enterprise response to zero-day vulnerabilities, emerging and pre-CVE threats, vendor advisories, third-party technology exposures, and cloud security exposures • Drive cross-functional assessment, prioritization, mitigation tracking, and executive communications • Ensure significant exposure events are governed, documented, escalated, and resolved • Lead post-event reviews and operational improvements • Translate vulnerability, threat, and exposure data into actionable risk decisions • Advise senior leaders on remediation priorities, business impact, and risk tradeoffs • Define strategy, roadmaps, metrics, and maturity objectives for remediation and exposure management • Establish scalable operating processes, playbooks, and governance models • Drive continuous improvement using Agile and Lean practices • Lead and develop security engineers and analysts • Coach emerging leaders and strengthen organizational capabilities

🎯 Requirements

• 10+ years of experience in cybersecurity, technology risk, security operations, vulnerability management, or related disciplines • Experience leading enterprise-scale remediation, risk reduction, security operations, or response coordination programs • Strong knowledge of vulnerability management practices, risk prioritization methodologies, and cyber risk governance • Demonstrated ability to lead large cross-functional initiatives across complex organizations • Experience presenting to senior leaders and executive audiences • Strong executive communication and stakeholder management skills • Proven ability to influence outcomes without direct authority • Experience managing teams, budgets, priorities, and strategic initiatives • Preferred: experience within a large regulated financial services organization and FFIEC and PCI requirements • Preferred: experience supporting regulatory examinations, audits, and enterprise risk governance activities • Familiarity with vulnerability management, security analytics, asset management, GRC, and workflow management platforms • Experience with cloud, infrastructure, application, and third-party technology security • Experience operating within Agile or SAFe environments • Professional certifications such as CISSP, CISM, CRISC, GIAC, or equivalent are preferred

🏖️ Benefits

• Incentive compensation plan based on company, line of business and/or individual performance • Comprehensive benefits • Differentiated compensation offerings • Benefits supporting physical, financial, emotional and social well-being