Cyber Threat Remediation Analyst(Onsite)

Cyber Threat Remediation Analyst With Program ManagementAbout the RoleThe Cyber Threat Remediation Analyst With Program Management will lead the development governance and continuous improvement of an enterprise Cyber Threat Remediation program.This role works across Cyber Defense Red Team Threat Intelligence Vulnerability Management Risk Technology and controlowner teams to turn complex security observations into prioritized measurable and sustainable riskreduction outcomes.The successful candidate combines cybersecurity knowledge with strong program management governance risk and stakeholder leadership capabilities. They can translate technical issues into clear ownership remediation plans executive reporting and defensible closure decisions.This is a program leadership role focused on creating a repeatable and scalable framework for identifying assessing prioritizing tracking validating and reporting cyber threat remediation activitiesWhat Youll DoCTR Program Development GovernanceBuild implement and mature the Cyber Threat Remediation program including intake criteria severity and prioritization models remediation standards servicelevel expectations and closure requirements.Develop and maintain governance frameworks policies procedures playbooks and accountability models.Establish clear ownership decision rights escalation paths and governance forums for remediation activity.Risk Management Oversight.Apply riskbased approaches to prioritize security observations and remediation work based on attackpath exposure business impact control effectiveness and residual risk.Evaluate remediation exceptions compensating controls risk acceptances and closure evidence.Measure and communicate remediation progress overdue risk trends and enterprise risk reduction.Assurance Evidence Management.Define evidence requirements and validation processes that support consistent traceable and defensible remediation decisions.Maintain documentation that supports governance independent review regulatory inquiries and assurance activities.Develop reporting that demonstrates remediation effectiveness and sustained control improvement.Threat Remediation Operations.Coordinate remediation activities across security technology risk and business teams.Monitor commitments dependencies milestones and blockers drive timely escalation when risk or delivery expectations are not met.Facilitate alignment among observation owners control owners subjectmatter experts and leadership.Executive Reporting Communications.Develop concise executive reporting dashboards scorecards and key risk indicators for security leadership and governance committees.Communicate remediation status trends decisions and material risks to senior stakeholders.Prepare leadership briefings risk summaries and responses for assurance or regulatory reviews.Threat Attack Path Understanding.Interpret Red Team results threat intelligence attack paths vulnerabilities and other security observations well enough to determine scope ownership priority and governance actions.Translate technical risk into sustainable remediation strategies and controlimprovement initiatives.Partner with technical teams to validate whether proposed actions materially reduce the identified risk.What You BringCybersecurity Knowledge.Demonstrated experience leading cybersecurity cyber risk governance remediation vulnerability management or security programmanagement work.Strong understanding of cyber threats adversary behavior attack paths security controls and riskbased decision making.Working knowledge of Red Team operations threat intelligence vulnerability management control validation and the MITRE ATTCK framework,Ability to engage credibly with security engineers and technical subjectmatter experts without serving as the primary handson analyst,Program Governance Experience,Experience building or maturing governance programs operating models policies standards procedures and reporting frameworks.Experience managing crossfunctional initiatives competing priorities risks dependencies and executive stakeholders.Knowledge of cyber risk management remediation tracking assurance practices evidence validation and metrics development.Demonstrated ability to take a process from concept through implementation and continuous improvement.Communication Leadership Skills.Excellent written verbal facilitation and executivecommunication skills.Ability to simplify complex technical and risk issues for technical teams risk partners and senior leaders.Strong judgment analytical thinking organization collaboration and problemsolving skills.Ability to influence outcomes establish accountability respectfully challenge assumptions and resolve ambiguity without direct authority.