Senior Cyber Exposure Management Analyst

Randstad is seeking a Senior Cyber Exposure Management Analyst for a premier client located in Washington, DC. In this high-visibility role, you will lead the identification, risk-based prioritization, and remediation coordination of security exposures, vulnerabilities, misconfigurations, and attack paths across both enterprise IT and operational technology (OT) environments. Operating within modern Continuous Threat Exposure Management (CTEM) and NIST framework guidelines, you will serve as a strategic partner to Technology Owners, Security Engineering, Cloud Services, and OT stakeholders, leveraging threat intelligence, business impact metrics, and asset criticality data to translate complex technical risks into actionable executive insights and drive measurable risk reduction.

Key Responsibilities

• Conduct continuous vulnerability, misconfiguration, and exposure assessments across complex infrastructure, applications, networks, cloud services, and OT/ICS/SCADA environments.
• Lead risk-based prioritization and cross-functional remediation coordination using asset criticality, exploitability, threat intelligence, and business impact context.
• Utilize and optimize enterprise exposure and vulnerability management tools, including Tenable, Qualys, Rapid7, Microsoft Defender, and ServiceNow.
• Perform external attack surface management (EASM) and detailed attack-path analysis to identify and mitigate security control gaps.
• Develop cybersecurity metrics, executive dashboards, and tracking frameworks to report overall enterprise exposure and compliance status to senior leadership.
• Partner with IT, Cloud, Network, Security Engineering, Cyber Fusion, and OT operational teams to ensure timely remediation while accommodating operational safety, system availability, and vendor constraints.
• Translate complex technical vulnerability data into clear business and operational risk assessments for diverse technical and non-technical stakeholders.

Qualifications & Competencies

• Demonstrated experience supporting large, complex enterprise cybersecurity programs, with proven expertise in exposure management and risk-based vulnerability prioritization.
• Hands-on technical experience with OT, ICS, or SCADA environments, including an understanding of maintenance windows, operational safety, and system availability constraints.
• Practical knowledge of major industry frameworks and controls, including NIST CSF, NIST SP 800-53, and CIS Controls.
• Proficiency with enterprise-grade scanning, exposure management, and ticketing platforms (Tenable, Qualys, Rapid7, Defender, ServiceNow).
• Strong technical writing and communication skills, with a track record of effective cross-functional stakeholder engagement and executive reporting.
• Relevant industry certifications strongly preferred (e.g., CISSP, CISM, CRISC, CISA, GICSP, GSEC, Security+, CASP+, or equivalent).

Required Skills :

Basic Qualification :

Additional Skills :

Background Check : No

Drug Screen : No