Manager, Cyber Exposure Management

Regions Bank

. Lead the Exposure Management strategy, including Continuous Threat Exposure Management (CTEM), and risk-based prioritization of remediation activities .

Posted 10/15/2026full-timeUnited StatesSeniorLead💰 $168,094 - $234,020 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Exposure Management, including Continuous Threat Exposure Management (CTEM) and risk-based methodologies for cyber exposure mitigation. Proven ability to lead security teams, manage vendor relationships, and communicate effectively with stakeholders at all levels.

Highest-signal resume keywords

Exposure Management StrategyContinuous Threat Exposure Management (CTEM)Certified Information Systems Security Professional (CISSP)Incident Response ProtocolsRisk-Based Methodologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability IdentificationThreat Exposure AnalysisCyber Security ArchitectureRisk RemediationAutomation InitiativesSecurity OperationsIncident ResponseThreat Intelligence IntegrationProject ManagementTechnical Aptitude

Soft Skills

LeadershipCommunication SkillsTeam CollaborationPrioritizationEngagement with Project Teams

Certifications & Qualifications

Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)

Industry Keywords

Cyber ThreatsFinancial Services SectorInformation Security StandardsRegulatory ComplianceAdversary Tactics, Techniques, and Procedures (TTPs)

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead the Exposure Management strategy, including Continuous Threat Exposure Management (CTEM), and risk-based prioritization of remediation activities
Build an in-house portal enabling technology owners to understand their exposures and prioritization requirements
Drive automation initiatives to improve vulnerability identification, prioritization, tracking, and reporting efficiencies
Provide strategic oversight of attack surface management, threat exposure analysis, and risk remediation initiatives
Integrate threat intelligence and adversary tactics, techniques, and procedures (TTPs) into exposure prioritization and remediation strategies
Develop and implement risk-based methodologies to identify, assess, prioritize, and mitigate cyber exposures across on-premises, cloud, and hybrid environments
Manage exposure management escalations and ensure critical vulnerabilities and high-risk findings are addressed within defined service-level objectives
Partner with IT, Security Operations, Infrastructure, Application Development, and business stakeholders to drive remediation and reduce organizational risk
Hire, build, mentor, and lead a high-performing security team while managing vendor relationships and security technology investments
Develop cyber security architectures, controls, processes, standards, and strategies aligned with Information Security standards, emerging threats, and overall strategy
Develop and implement incident response protocols for ongoing threats and attacks
Communicate current threat environment, incidents, and projected threats to senior management and executives
Evaluate and test hardware, firmware, and software for potential systems-security impacts
Coordinate with managers to integrate Information Security project components with application development, network, server, and mainframe projects
Partner across Technology, Operations, Digital, and Data to strengthen risk management, compliance, and cyber security
Evaluate risk and control impacts when designing or implementing changes to processes, systems, products, and services

Requirements

What you’ll need

Bachelor's degree in a related field and eight (8) years of related experience OR High School Diploma or GED and twelve (12) years of related experience
Four (4) years of lead or supervisory/managerial experience
Applicants must currently be authorized to work in the United States on a full-time basis
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other industry certification preferred
Good understanding of current internal and external cyber threats to the financial services sector preferred
Experience managing Information Technology and/or Information Security projects preferred
Experience with security operations and incident response/handling preferred
Ability to prioritize assignments while working on multiple projects
Advanced technical aptitude skills
Demonstrated ability to effectively engage project teams and leadership within a corporate setting
Excellent writing and oral communication skills
Strong ability to predict and plan for unknown threats
Strong ability to work well with others and place a premium on the group’s success
Understanding of and ability to interpret applicable rules, regulations, and industry guidance
No work visa sponsorship available

Benefits

Comp & perks

Annual discretionary incentive plan
Opportunity to participate in the Long Term Incentive Plan
Paid Vacation/Sick Time
401K with Company Match
Medical, Dental and Vision Benefits
Disability Benefits
Health Savings Account
Flexible Spending Account
Life Insurance
Parental Leave
Employee Assistance Program
Associate Volunteer Program