Cyber Exposure Management Expert

About the role

As a Cyber Exposure Management Expert, you will serve as the technical lead for developing NVISO's Cyber Exposure offering. You will design processes, integrations, and reporting that connect vulnerability management, asset management, and remediation, while guiding technical decisions for complex client engagements. Additionally, you will shape the service roadmap by developing capabilities such as Continuous Threat Exposure Management and assessing new technologies like AI and quantum readiness.

Responsibilities

• Defining the technical architecture and delivery approach for the Cyber Exposure offering, connecting Vulnerability Management, Asset Management, hardening, Patch Management, reporting and remediation, with clear roles and governance
• Leading technical delivery on customer engagements, advising on remediation and hardening, resolving design and integration problems and reviewing the quality of our work
• Linking vulnerability findings to asset inventories, CMDBs, cloud environments, business services and owners, and resolving gaps in coverage and data quality
• Designing remediation processes with owners, priorities, SLAs, escalation, risk acceptance and closure checks, aligned with Change Management and supported by ITSM, Patch Management and other remediation solutions
• Building reporting that shows clients their exposure and remediation progress, with clear priorities for technical teams and reliable measures of coverage, ageing, SLA performance and accepted risk for management
• Advising on secure configurations and hardening baselines for infrastructure and cloud environments, reducing unnecessary exposure and proposing compensating controls when patching is not immediately possible
• Keeping up with developments in Exposure Management and evaluating AI and agentic solutions through targeted pilots to improve existing approaches to prioritization, remediation guidance and reporting
• Turning client needs into service packages, technical standards and delivery methods, coaching consultants and providing technical input for proposals and scoping

Required skills

• Vulnerability Management
• IT Security
• Enterprise infrastructure
• Networking
• Cloud environments
• CMDB
• ITSM
• English

Nice to have

• Scripting
• API
• Consulting
• CTEM
• Quantum Readiness
• AI
• Attack Surface analysis
• Crypto Agility
• Post Quantum Cryptography

Qualifications

• Bachelor's or Master's degree in a relevant field
• Equivalent professional experience
• Citizenship in one of the 32 NATO member states or Austrian citizenship

Benefits

• Training budget of 10.000 EUR
• 10 man days for training
• Flexible working hours
• Home office possibilities
• Business Bike Leasing
• BahnCard 50 1st class
• Public transfer ticket
• EGYM WellPass
• 30 holidays
• Company Pension Scheme

About the Company

NVISO provides cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents. The company is built on four fundamental values: We are Proud, We Break Barriers, We Care and No BS.