Principal, Exposure Analysis – Coordination

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Oversee the Exposure Analysis & Coordination function, acting as the principal authority for enterprise exposure responses.

• Create and uphold operating procedures, response playbooks, escalation criteria, and engagement models.

• Offer leadership and support during active exposure incidents.

• Facilitate enterprise-wide collaboration among technology, security, risk, and business stakeholders.

• Ensure that response efforts correspond with enterprise risk priorities and regulatory requirements.

• Generate and sustain reports on active exposures, the effectiveness of responses, progress on remediation, and operational trends.

• Set and track key performance indicators and operational metrics.

• Detect recurring themes, process deficiencies, and systemic challenges through the analysis of historical events.

• Deliver executive-level reports and strategic recommendations for risk-informed decision-making.

• Lead post-event evaluations and root cause investigations.

• Execute process enhancements, control upgrades, automation, and governance modifications.

• Identify and deploy automation for exposure intake, validation, evidence gathering, status tracking, reporting, and closure.

• Specify automation requirements and collaborate with security and technology teams to create secure, scalable workflows.

• Establish controls, monitoring, and exception management processes for automated workflows.

• Relay exposure and remediation updates to technical teams, business leaders, and executives.

• Provide status updates, escalate significant risks and unresolved issues, and foster cross-functional collaborations.

⛳️ Requirements

• Bachelor’s degree in Computer Science/Information Systems or a comparable combination of education and experience.

• Over eight years of pertinent IT experience, including at least six years in a hands-on information security development capacity.

• Extensive background in cybersecurity, vulnerability management, incident response, security operations, technology risk, or related fields.

• Experience leading large-scale, cross-functional response or remediation initiatives.

• Strong knowledge of vulnerability and exposure management practices.

• Demonstrated ability to influence stakeholders across a matrixed organization.

• Outstanding verbal and written communication abilities.

• Experience in identifying and implementing workflow automation or orchestration opportunities within vulnerability management.

• Capability to define automation requirements, acceptance criteria, controls, exception handling, and measurable outcomes.

• Proficiency in Python scripting for workflow automation, data processing, validation, and operational reporting.

• Ability to develop, test, troubleshoot, document, and maintain secure, reusable scripts that include logging, error handling, and exception management.

• Experience in system integration and familiarity with JSON and CSV formats.

• Working knowledge of source control and collaborative development methodologies.

• Ability to query, transform, and analyze operational or security data using SQL, Python data libraries, or similar tools.

• Familiarity with security platforms, ticketing systems, workflow-orchestration tools, and dashboard technologies.

• Experience in applying generative AI capabilities to vulnerability management scenarios.

• Position not available for immigration sponsorship.

🏝️ Benefits

• Incentive compensation plan based on company, line of business, and/or individual performance.

• Comprehensive benefits programs that support physical, financial, emotional, and social well-being.

• Benefits available for employees and their families.