Lead, Continuous Threat Exposure Management

SUMMARY:
A leader in the telecoms industry is looking to appoint a Lead Continuous Threat Exposure Management to Lead the establishment, operation and continuous improvement of Vodacom’s Continuous Threat Exposure Management capability.

The role is accountable for providing a unified, risk based view of cyber exposure across critical business services, infrastructure, telecommunications platforms, cloud environments, applications, APIs, identities, data, AI systems and approved third parties.
The role will drive the complete exposure lifecycle, from discovery and prioritisation through remediation, validation, exception management and executive reporting, with success
measured by verified risk reduction rather than vulnerability volumes.

POSITION INFO:
Experience and Qualifications Relevant degree or equivalent experience in cybersecurity, technology, engineering or risk management. Significant experience leading vulnerability management, exposure management, cyber-risk reduction, security testing or a related enterprise security capability. Strong knowledge of infrastructure, cloud, identity, application, API, network and telecommunications security. Experience coordinating remediation across complex technology and business environments. Strong understanding of attack-path analysis, threat-informed prioritisation, security assurance and exception governance. Experience managing executive reporting, governance forums, senior stakeholders and service providers. Relevant certification such as CISSP, CISM, CRISC, CCSP, OSCP or GIAC is advantageous. Knowledge of NIST CSF 2.0, MITRE ATT&CK, CISA KEV and FIRST EPSS is advantageous.