Dir, Exposure Management

Job description

The Director, Exposure Management leads Berkshire Hathaway Energy's enterprise cybersecurity exposure management program across information technology, operational technology, cloud, applications, software supply chain, and externally accessible environments. Reporting to the Senior Director, Security Governance, Risk & Assurance, this position directs a team of employees and is accountable for executing a risk-based, measurable approach to discovering, prioritizing, assigning ownership, validating, remediating, and governing cyber exposures across Berkshire Hathaway Energy and its affiliates. The director advances Continuous Threat Exposure Management (CTEM), vulnerability management, external attack surface management, security assessments, application and software supply chain exposure management, offensive security validation, and remediation governance. The role partners with affiliate security teams, technology owners, application and cloud teams, risk and compliance functions, and executive leadership to focus resources on exposures that present the greatest business, operational, regulatory, and safety risk while driving clear ownership, timely remediation, and defensible risk decisions.