Director, Technology; Threat Exposure & Assurance Management

Job Posting End Date 11-09-2026 Please note the job posting will close on the day before the posting end date. Job Summary The Director of Threat Exposure & Assurance Management is a senior technology leader within centralized IT who has built, delivered or operated enterprise services. The role requires broad knowledge of infrastructure, networks, applications, platforms and cloud, technical depth in at least one domain, and strong security, vulnerability and risk-analysis expertise.

As the dedicated liaison for the Chief Information & Technology Officer (CITO) organization, the Director operates a hub-and-spoke model: the central hub coordinates priorities, governance and assurance, while technology owners execute remediation. Enterprise Cybersecurity owns policy, standards and threat intelligence; this role owns the speed and consistency of CITO execution and measurable risk reduction. The Director translates findings into practical engineering and operational work, balancing exploitability, exposure and business impact with testing, change discipline, service dependencies and availability.

The role aligns execution with AEP risk tolerance and regulatory obligations while maturing people, processes and automation.

What you'll do:
Define and execute an enterprise technology remediation strategy across infrastructure, networks, applications, platforms, cloud and shared services, aligned with Enterprise Cybersecurity policy, AEP risk tolerance and regulatory obligations. Own the end-to-end remediation lifecycle, including intake, technical triage, accountable-owner assignment, tracking, validation and closure. Establish service levels by severity and asset criticality, and hold delivery teams accountable for committed timelines. Prioritize work using exploitability, active exploitation, exposure, service dependencies, asset criticality and business impact rather than severity scores alone.

Translate findings into executable engineering and operational work with clear ownership and acceptance criteria. Coordinate cross-team delivery with technology owners, engineering and operations. Ensure plans address testing, change and release approvals, maintenance windows, patch deployment, rollback readiness and service availability, and integrate remediation into application and service lifecycle processes. Lead the CITO response to emergency vulnerabilities and zero-day exposures in partnership with Enterprise Cybersecurity, coordinating impact assessment, containment, compensating controls, patching, validation and timely executive reporting.

Serve as the single, accountable security liaison between Enterprise Cybersecurity and the CITO organization. Enterprise Cybersecurity owns policy, standards and threat intelligence; this role owns coordinated CITO execution and measurable risk reduction. Operate the central hub that translates security requirements, findings and directives into prioritized work for technology spokes. Build durable relationships with infrastructure, network, application, platform, cloud and operations leaders to embed shared delivery accountability.

Resolve competing remediation priorities and negotiate resource allocation and sequencing with technology leaders. Partner with architecture and engineering to evaluate trade-offs among security, scalability, reliability, availability, operational stability and change risk. Where immediate remediation is not feasible, coordinate compensating controls and documented exceptions or risk-acceptance requests, routing decisions through established governance to authorized approvers. Maintain disciplined governance for intake, escalation, exceptions and change execution.

Report remediation posture, progress and residual risk with clear ownership and business context; govern vendor and partner commitments to ensure verifiable outcomes without operational fragility. Drive patching and technology lifecycle modernization, configuration hardening, certificate and secrets management, identity and access improvements, and attack-surface reduction with accountable technology owners. Eliminate systemic causes of recurring vulnerabilities through engineering standards, automation and sustainable operating practices.

Apply Lean practices to reduce cycle time, manual effort and handoff friction; use analytics and dashboards to expose bottlenecks, trends and root causes. Define, track and report open vulnerabilities by severity, mean time to remediate,…