Manager, Exposure Management

Manager, Exposure Management Skip to main content

By clicking “Accept Cookies”, you agree to the storing of cookies and similar technologies on your device for functional, third-party analytics, and advertising purposes. Use of this Website confirms your acceptance of our Terms of Use. To view more details, please refer to our
* privacy policy*.#Manager, Exposure Management page is loaded## Manager, Exposure Management Apply locations:
Lincoln, NE:
Madison, WI:
Centennial, COtime type:
Full time posted on:
Posted Todayjob requisition :
R22870

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert.  For over 40 years, Nelnet has been serving its customers, associates, and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.

Nelnet is seeking an experienced and motivated Cybersecurity Manager, Exposure Management to lead our vulnerability operations, attack surface management, and application security functions. The ideal candidate will combine strong cybersecurity knowledge with exceptional leadership and stakeholder-management skills, and a demonstrated ability to drive remediation outcomes across engineering, infrastructure, and business teams.
In this role you will lead a single, unified exposure management program — bringing findings from code, configuration, cloud, infrastructure, and external attack surface into one prioritized, risk-based view. You will guide the team through a transformative evolution of how the function operates, adopting a Continuous Threat Exposure Management (CTEM) approach and leveraging AI and automation to optimize the prioritization of work activity.

As the Manager, Exposure Management, you will be responsible for reducing enterprise risk by ensuring the right exposures are identified, prioritized, and remediated through strong partnerships across the organization.
This position requires work in support of the Company’s contract with the United States Department of Education (“ED”). As such, the United States Government requires that any applicant for this position must complete United States Government security clearance. Effective June 1, 2018, ED has informed Nelnet that security clearance applications for foreign nationals are not being accepted or processed. In light of this direction from ED, Nelnet will be unable to hire applicants without United States citizenship for such positions.

This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates within 30 miles of an office to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence.
** Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship as security clearance is required.
**** Responsibilities:
** Leadership and Team Development:
* Provide leadership, guidance, and mentorship to a team of vulnerability analysts and application security practitioners.
* Foster a collaborative, high-performance environment and lead the team through a transformative evolution of its operating model.
* Conduct performance evaluations, identify training needs, and support professional development.
* Evolve team roles toward judgment, validation, and stakeholder engagement as automation and AI-assisted workflows mature.

Exposure Management Operations:
* Oversee a unified exposure management pipeline — intake, enrichment, prioritization, and remediation orchestration — across a dynamic, continuously changing vulnerability…