CTEM Consultant

About the role

We’re looking for a Continuous Threat Exposure Management (CTEM) specialist to help develop and operationalise an enterprise-wide approach to identifying, validating, prioritising and remediating cyber exposures for an Insurance client. Working closely with the CISO, you’ll help establish a continuous, risk-led security capability that goes beyond traditional vulnerability management, connecting people, processes and technologies to reduce the organisation’s real-world exposure to cyber threats.

Responsibilities

• Develop and evolve the organisation’s CTEM strategy, roadmap and operating model.
• Establish or mature the five core CTEM stages: scoping, discovery, prioritisation, validation and mobilisation.
• Bring together exposure data across vulnerability management, external attack surface management, cloud security, identity and threat intelligence.
• Implement risk-based prioritisation that considers exploitability, business criticality and attack paths.
• Validate exposures through attack-path analysis, penetration testing, adversary simulation and other security validation techniques.
• Establish effective remediation workflows with infrastructure, cloud, application and security teams.
• Define programme metrics, governance and reporting to demonstrate measurable reductions in cyber risk.
• Advise the CISO and senior stakeholders on capability gaps, technology investments and continuous improvement.

Requirements

• Demonstrable experience in CTEM, continuous exposure management, attack surface management or a closely related cybersecurity discipline.
• Strong understanding of risk-based exposure prioritisation, vulnerability management and security validation.
• Experience integrating security tools, data and workflows to improve visibility and remediation.
• The ability to translate technical findings into actionable business risk reduction.
• Experience working with senior security stakeholders and influencing teams across a complex technology environment.
• A practical, delivery-focused approach to developing and improving security capabilities.
• Highly desirable: Experience building a CTEM or enterprise exposure management programme from the ground up.
• Highly desirable: Experience defining a target operating model, selecting and integrating tooling, and establishing programme governance.
• Highly desirable: A track record of demonstrably improving exposure management maturity and reducing exploitable risk.
• The ideal candidate combines strong technical security knowledge with the ability to turn strategy into an effective, continuously operating capability.

Pay

Circa $100 per hour.