Professional Background

8–10 years of progressive experience in enterprise cyber security with demonstrable in-depth technical expertise across Threat Exposure Management, Vulnerability Management, Defensive and Offensive Security, Application Security, Cloud Security, OT/ICS Security, Data and Identity Security, and AI/ML Security.

Experience must span large-scale, heterogeneous environments with complex technology stacks.

Certifications such as CISSP, CISM and GIAC (GMON, GICSP, GWEB, GCSA) are advantageous, but equivalent hands-on technical capability, advanced analytical proficiency, and a strong record of continuous learning and practical security training are essential.

Leadership & Communication

- Proven experience in directly managing a team of Threat Exposure and Vulnerability Management Analysts, including mentoring, developing and guiding security professionals within a collaborative, high-performing environment.

- Strong strategic and visionary capabilities, with the ability to co-develop and drive the function’s technical vision, strategy and roadmap in alignment with business objectives and the organisation’s threat appetite. Technical Expertise

- Deep knowledge of vulnerability management, threat exposure management, exploit development concepts, exposure validation, and remediation governance.

- Robust understanding of common security vulnerabilities, attack vectors, and security testing frameworks, such as OWASP, MITRE ATT&CK;, CVE / CVSS, and NIST SP 800-53.

- Robust expertise across technical domains such as IT, OT, Cloud, network security,



container environments, and identity-centric security. Proven capability in AppSec, secure coding practices, CI/CD and IaC security, and DevSecOps tooling.

- Solid understanding of AI/ML architecture, AI security threats, LLM exposure risks, and secure integration patterns.

- Hands-on expertise with tooling in different landscapes: VM, ASM/EASM, AppSec, Cloud, OT, Data, Identity, AI. Stakeholder Engagement & Culture

- Serve as the advisor and central point of contact for all Threat Exposure and Vulnerability Management matters across the organisation within a given scope.

- Build strong relationships with industry partners, vendors, and the wider technology ecosystem to incorporate external expertise, benchmark performance, and stay ahead of emerging threats and vulnerability trends.

- Develop trusted relationships across Cyber, Portfolio teams, Engineering, and Business functions, anchored in transparency, accountability, and the organisation’s core values.

- Lead by example in strengthening collaboration, breaking down silos, and cultivating high-performing cross-functional networks.

- Promote a values-driven culture that embraces diversity, inclusion, and collective ownership of cyber risk.

- Champion staff education, awareness, and secure behaviours to embed a proactive, cyber-aware mindset across the organisation.

- Foster a responsive, delivery-focused culture that partners effectively with Technology and Business units to drive timely resolutions and value-led security outcomes

📌 Cyber Manager - Threat Exposure Management (Bengaluru)
🏢 A.P. Moller - Maersk
📍 Bengaluru