Cybersecurity Specialist (Exposure Management) (Information Security Department) [NIE]
Core
Manage exposure assessment activities, vulnerability disclosure, penetration testing, and remediation coordination across enterprise environments.
Role type
Senior IC cybersecurity specialist (exposure management)
Builds
Secure enterprise applications, operating systems, cloud platforms, and identity environments
Domain
Education sector cybersecurity
Required skills
vulnerability management, exposure assessment, penetration testing, risk analysis, remediation tracking, cloud security, identity security, security testing methodologies, incident response support, security automation
Preferred skills
AI-assisted security testing, attack surface management, configuration assessment, stakeholder coordination
Technologies
cloud platforms, operating systems, web applications, identity security tools, security automation frameworks
Responsibilities
Manage exposure assessment activities across applications, operating systems, cloud platforms, and enterprise environments; Support the Vulnerability Disclosure Programme (VDP), bug bounty activities, and security testing initiatives; Conduct penetration testing, configuration reviews, compliance assessments, and AI-assisted security testing; Monitor and analyse external attack surface, cloud, and identity exposures to identify security risks; Prioritise and coordinate remediation activities based on risk, business impact, and threat exposure; Track remediation progress, manage security exceptions, and validate the effectiveness of implemented fixes; Support cybersecurity incident investigations by identifying vulnerabilities and exposures contributing to security incidents; Support the implementation, enhancement, and operationalisation of cybersecurity technologies, solutions, AI and security projects; Drive process improvement, automation, and continuous enhancement initiatives to improve cybersecurity effectiveness and operational efficiency.
