ICONMA · 10 hours ago
Cyber Threat and Exposure Management (TEM) Oversight and Governance
ICONMA is a company in the commercial banking sector seeking a Cyber Threat and Exposure Management (TEM) Oversight and Governance professional. The role involves owning the governance framework for vulnerability and patch management, providing oversight, and driving continuous improvement in governance effectiveness.
Staffing & Recruiting
Responsibilities
Align with Client Protection Services (TPS) priorities that define ‘our what’ that may change based on business need
Own the end-to-end governance framework for the Vulnerability and Patch Management program, including routines, escalation paths, and decision forums
Design, document, and maintain governance processes, standards, SOPs, and control execution procedures
Lead control lifecycle management activities, including control design, effectiveness validation, issue identification, and remediation tracking
Provide risk-based oversight of vulnerability identification, prioritization, remediation timelines, and exception handling
Own issue management workflows, including root cause analysis, action plan approval, tracking, and formal closure
Facilitate recurring governance routines (weekly, monthly, ad-hoc), ensuring clear decisioning, documentation, and follow-through
Define, monitor, and report KPIs and KRIs related to vulnerability posture, control health, and remediation performance
Partner with operational security teams (Infrastructure, Application Security, Red Team, etc.) to align governance requirements with execution realities
Act as a primary interface for audit, risk, and compliance stakeholders on vulnerability governance topics
Drive continuous improvement by identifying systemic gaps, emerging risks, and opportunities to mature governance effectiveness
Integrate threat intelligence, exploit availability, and external advisories into vulnerability prioritization models to support dynamic risk response
Extend governance oversight to vulnerabilities impacting critical third-party providers and cloud hosted services
Drive patching and vulnerability requirements into the third-party risk management and contractual obligations and assessments
Leads complex and visible projects with moderate to high risk and complexity
Qualification
Required
10+ years of experience in cybersecurity, technology risk management, or vulnerability management governance
Demonstrated experience designing and operating governance routines and escalation frameworks
Strong understanding of vulnerability management tooling, patching methodologies, and remediation constraints across infrastructure, cloud, endpoints, and applications
Experience with control frameworks and issue management processes
Ability to communicate technical risk clearly and credibly to executive, risk, and regulatory stakeholders
Strong facilitation and negotiation skills across technology, security, compliance, and business teams
Proven ability to drive disciplined governance while enabling business agility
Experience working with systems of record like GRC, ITSM related tools
Strong written communication skills for standards, procedures, and governance documentation
Analytical mindset with experience defining and interpreting metrics and trends
Comfort operating in regulated environments (financial services, or similar)
Previous experience in leading complex IT projects
Direct experience supporting regulatory frameworks (e.g., NYDFS, FFIEC, PCI, SOX, GLBA)
Prior second line (oversight) or internal audit experience
Experience standing up new governance functions or maturing immature programs
Familiarity with Red Team, Penetration Testing, or Threat-Driven Risk models
Experience leading or mentoring governance or risk teams
Exposure to executive risk committees or board-level reporting
CISSP Certification
Benefits
Health Benefits
Referral Program
Company
ICONMA
ICONMA: Your Partner in Global Staffing Solutions and Digital Transformation ICONMA is a globally recognized, Woman-Owned staff augmentation and technology consulting firm.
H1B Sponsorship
ICONMA has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (34)
2024 (31)
2023 (26)
2022 (39)
2021 (37)
2020 (69)
Funding
Current Stage
Late StageCompany data provided by crunchbase