Vulnerability Management Lead

THIS IS A 12+ MO, W2 (WE CANNOT ACCEPT C2C OR REFERRAL BASED BUSINESS) CONTRACT

ONSITE IN CINCINATTI, OH (MUST BE LOCAL AT TIME OF APPLICATION)

MUST BE USC, GC, H4 OR STEM OPT VISA HOLDER (WE CANNOT SUPPORT H1B CANDIDATES)

MAX RATE BASED ON EXPERIENCE: $88hr

We are seeking a Lead, Exposure Management to serve as the operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day-to-day response activities, assessing enterprise exposure, coordinating cross-functional stakeholders, tracking remediation efforts, and driving issues through resolution.

The ideal candidate will independently manage active exposure events while partnering with senior cybersecurity leaders to ensure timely assessment, communication, escalation, and closure. This position collaborates closely with other team members to provide continuity, backup coverage, and support for simultaneous events.

Key Responsibilities

Exposure Response Coordination

• Lead coordination of active cybersecurity exposure events from initial intake through closure.
• Assess enterprise exposure and coordinate validation activities across technology teams.
• Facilitate response meetings, war rooms, and working sessions.
• Drive timely engagement of stakeholders, subject matter experts, and decision-makers.
• Ensure response activities remain organized, documented, and focused on reducing risk.

Remediation & Mitigation Management

• Track remediation and mitigation activities across multiple teams and functions.
• Maintain ownership assignments, target dates, action items, and status updates.
• Identify and escalate blockers, dependencies, and unresolved issues.
• Verify remediation efforts are completed and appropriately documented.
• Support transition of open issues to longer-term governance and risk management processes when needed.

Documentation & Reporting

• Maintain the authoritative record of active response activities.
• Document decisions, timelines, exposure assessments, status updates, and closure evidence.
• Prepare concise and actionable updates for leadership and stakeholders.
• Ensure documentation meets audit, regulatory, and governance requirements.

Escalation & Handoff Management

• Identify situations requiring escalation to leadership, incident response teams, risk management, or other stakeholders.
• Coordinate structured handoffs between teams and processes.
• Ensure continuity of ownership and accountability throughout the response lifecycle.

Continuous Improvement

• Participate in post-event reviews and lessons-learned sessions.
• Identify opportunities to improve coordination, communication, and response effectiveness.
• Contribute to the enhancement of playbooks, procedures, templates, and response standards.

Required Qualifications

• Experience in cybersecurity, vulnerability management, security operations, incident response coordination, technology risk, or a related field.
• Demonstrated ability to coordinate complex initiatives involving multiple technical and business teams.
• Strong organizational, facilitation, and communication skills.
• Ability to perform effectively in fast-paced, high-visibility environments.
• Experience tracking issues, managing action plans, and driving accountability to completion.

Preferred Qualifications

• Experience supporting vulnerability response, zero-day response, cloud security, or threat intelligence activities.
• Familiarity with enterprise security tools, ticketing platforms, and technology operations.
• Experience working within regulated industry environments.
• Relevant security certifications such as Security+, CySA+, CISSP, CISM, GCIH, or equivalent.

What Success Looks Like

In this role, success is measured by your ability to:

• Effectively coordinate cybersecurity exposure events across multiple teams.
• Maintain accurate situational awareness and timely stakeholder communication.
• Drive remediation and mitigation activities to completion.
• Ensure clear accountability throughout the response lifecycle.
• Deliver comprehensive documentation that supports governance, audit, and regulatory requirements.