Senior Director, Exposure & Vulnerability Management

• 10+ years in information security, technology risk or IT, including 7+ years leading enterprise-scale vulnerability, exposure or security programs in a large, complex, global organization.

• Proven experience leading multi-disciplinary, geographically distributed teams, including leaders of leaders.

• Deep understanding of vulnerability management, application security (SAST/SCA), cloud security and modern software delivery environments.

• Hands-on familiarity with risk-based prioritization approaches, threat intelligence, and exposure validation techniques.

• Demonstrated ability to move program from operational execution to strategic, outcome-driven models.

• Strong data-driven mindset, with experience using metrics and analytics to influence decisions and behavior.

• Track record of leading transformation initiatives across people, process and technology, including tool rationalization and vendor management.

• Experience operating in a regulated industry (financial services, insurance or similar) and engaging with regulators and auditors.

• Comfortable operating at both strategic and execution levels, translating vision into measurable results.

• Exceptional communication skills, with the ability to convey complex technical risk in business-relevant terms to executive and Board audiences.

Preferred

• Experience in Cloud computing environments and with ServiceNow-based or equivalent remediation workflows.

• Experience implementing a CTEM or equivalent continuous exposure management model.

• Familiarity with frameworks such as NIST CSF, ISO 27001, CIS Controls and FAIR or other risk quantification approaches.

• Relevant certifications such as CISSP, CISM, CRISC or equivalent.

• Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience.

•  

Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity.

This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified.

Compensation and Benefits - US locations only

Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that base salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation.

Compensation

The base salary compensation range being offered for this role is $180,000-$240,000 USD per year.

This role is also eligible for an annual short-term incentive bonus.

Company Benefits

WTW provides a competitive benefit package which includes the following (eligibility requirements apply):

• Health and Welfare Benefits: Medical (including prescription coverage), Dental, Vision, Health Savings Account, Commuter Account, Health Care and Dependent Care Flexible Spending Accounts, Group Accident, Group Critical Illness, Life Insurance, AD&D, Group Legal, Identify Theft Protection, Wellbeing Program and Work/Life Resources (including Employee Assistance Program)
• Leave Benefits: Paid Holidays, Annual Paid Time Off (includes paid state/local paid leave where required), Short-Term Disability, Long-Term Disability, Other Leaves (e.g., Bereavement, FMLA, ADA, Jury Duty, Military Leave, and Parental and Adoption Leave), Paid Time Off (Washington State only)
• Retirement Benefits: Contributory Pension Plan and Savings Plan (401k). 

Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records.
EOE, including disability/vets