Director, Exposure Operations

Job not on LinkedIn

🕒 October 6

🇺🇸 United States – Remote

💵 $170k - $200k / year

⏰ Full Time

🔴 Lead

⚙️ Operations

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

FNF Family of Companies - Agency Division

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1847

🏠 Real Estate

🛡️ Insurance

💸 Finance

Real Estate • Insurance • Finance

FNF Family of Companies - Agency Division is the agency and title operations arm of Fidelity National Financial (FNF), a leading provider of title insurance and settlement services to the real estate and mortgage industries. The company emphasizes advancing, expanding, and protecting property ownership by offering title insurance, settlement services, and complementary mortgage and real estate services (including home warranties, UCC insurance, notary and relocation services). FNF also invests in real estate technology (brands like SoftPro, SkySlope, NextAce, ServiceLink) and provides annuities and life insurance products through affiliated businesses. FNF highlights market leadership (No. 1 in market share in residential purchase, refinance, and commercial markets; No. 1 or No. 2 in 39 states) and a corporate focus on fraud prevention, technology-enabled transactions, and a broad portfolio of real estate-related services.

📋 Description

• Lead the enterprise Exposure Management operating model, including exposure analysis and prioritization, remediation and tracking, and validation • Design and run the end-to-end exposure lifecycle from intake through closure • Establish processes for findings across infrastructure, applications, identity, attack surface, security configurations, and offensive security activities • Build and execute a multi-year roadmap aligned with enterprise security objectives • Develop risk-based prioritization using technical severity, exploitability, business context, and compensating controls • Establish remediation governance, ownership, tracking, escalation, and accountability • Define validation workflows to confirm remediation effectiveness and measure exposure reduction • Own business requirements and operational workflows for exposure management platforms • Partner with engineering teams on platform enhancements, automation, workflow improvements, and future capabilities • Produce exposure analytics, operational metrics, and executive reporting • Reduce manual effort through security automation and workflow optimization • Drive remediation and risk reduction across infrastructure, application, identity, security operations, and business teams • Continuously improve the operating model as threats, business needs, and program maturity evolve

🎯 Requirements

• Bachelor’s degree or the equivalent combination of educating, training, and work experience • Demonstrated experience in technical vulnerability management, exposure management, or closely related security operations functions • Experience building or significantly maturing security programs, including scalable processes, governance, and operational workflows • Strong knowledge of vulnerability analysis, risk assessment, exposure prioritization, and risk-based remediation • Understanding of security exposures across infrastructure, applications, identity, and external attack surfaces • Experience establishing remediation ownership, tracking progress, managing escalations, and driving accountability across multiple teams • Ability to translate security and operational needs into clear business requirements for engineering and technology partners • Experience developing security metrics, exposure analytics, and reporting for technical stakeholders and executive leadership • Ability to develop a long-term strategic vision and translate it into actionable roadmaps and operational improvements • Strong communication, stakeholder management, and influencing skills, with the ability to drive outcomes across teams without direct reporting authority • Experience leading enterprise technical vulnerability management or exposure management programs in a large, complex organization • Experience integrating threat intelligence, security operations insights, and business context into exposure prioritization • Familiarity with application security, attack surface management, identity security, security baseline assessments, and offensive security findings • Experience developing validation processes that confirm remediation effectiveness and demonstrate measurable risk reduction • Experience partnering with engineering teams to improve security platforms, workflow orchestration, scoring, and reporting capabilities • Demonstrated success using automation to reduce manual operational effort and improve the speed and consistency of remediation workflows • Experience driving adoption of new security processes and governance practices across distributed technology and business teams

🏖️ Benefits

• Optional health and welfare insurance (medical/dental/vision/life/disability) • Paid holidays • Vacation time off • Sick time off • Matching 401(k) plan • Matching employee stock purchase plan