Information Security Analyst - Exposure Management Lead IV

Information Security Analyst – Exposure Management Lead IVLocation: Cincinnati, OH – 45202Duration: 8+ months contractTechnical SkillsMust HaveAbility to operate effectively in fast-paced, high-visibility situationsDemonstrated ability to coordinate complex efforts involving multiple technical and business teamsExperience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fieldsExperience tracking issues, managing action plans, and driving accountabilityExposure Risk and Response CoordinationStrong organizational, facilitation, and communication skillsNice To HaveExperience in Financial Industry or BankingJob DescriptionInformation Security Analyst - Exposure Management LeadPosition SummaryThe Lead, Exposure Management serves as an operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day-to-day response activities, assessing enterprise exposure, coordinating stakeholders, tracking remediation progress, and driving issues to resolution. The Lead is expected to independently manage active exposure events while partnering closely with the principal to ensure timely assessment, communication, escalation, and closure. This role works closely with other Leads to provide continuity, backup coverage, and support for simultaneous events.Key ResponsibilitiesExposure Response CoordinationLead coordination of active exposure events from initial intake through closureAssess enterprise exposure and coordinate validation activities across technology teamsFacilitate response meetings and working sessionsDrive timely engagement of stakeholders, subject matter experts, and decision makersEnsure response activities remain organized, documented, and focused on risk reductionRemediation & Mitigation TrackingTrack remediation and mitigation activities across multiple teamsMaintain ownership assignments, target dates, action items, and status updatesIdentify and escalate blockers, dependencies, and unresolved issuesVerify that remediation activities are completed and appropriately documentedSupport transition of open issues to longer-term governance processes when necessaryDocumentation & ReportingMaintain the authoritative record for active response activitiesDocument decisions, timelines, exposure assessments, status updates, and closure evidencePrepare concise updates for leadership and stakeholdersEnsure response documentation supports audit, regulatory, and governance requirementsEscalation & Handoff ManagementIdentify situations requiring escalation to leadership, Incident Response, Risk Management, or other stakeholdersSupport structured handoffs between teams and processesEnsure continuity of ownership and accountability throughout the response lifecycleContinuous ImprovementParticipate in post-event reviews and lessons-learned sessionsIdentify opportunities to improve coordination, communication, and response effectivenessContribute to updates of playbooks, procedures, templates, and response standardsQualificationsRequiredExperience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or related fieldsDemonstrated ability to coordinate complex efforts involving multiple technical and business teamsStrong organizational, facilitation, and communication skillsAbility to operate effectively in fast-paced, high-visibility situationsExperience tracking issues, managing action plans, and driving accountabilityPreferredExperience supporting vulnerability response, zero-day response, cloud security, or threat intelligence activitiesFamiliarity with enterprise security tools, ticketing platforms, and technology operationsExperience working within a regulated industry environmentSecurity certifications such as Security+, CySA+, CISSP, CISM, GCIH, or equivalent