Product Area Lead – Exposure Management

About the role

ANZ is seeking a senior leader to own its enterprise exposure management capability. You will ensure a continuously updated view of the bank’s cyber attack surface and drive remediation of vulnerabilities across a complex, multi‑cloud environment.

Key responsibilities

• Lead the exposure management programme, covering attack surface management, vulnerability management and remediation oversight.
• Define and maintain enterprise‑wide visibility of cyber exposures across internal, external and third‑party environments.
• Establish and enforce vulnerability‑scanning standards, policies and coverage.
• Own the end‑to‑end vulnerability lifecycle – discovery, triage, prioritisation and closure.
• Implement risk‑based prioritisation frameworks using threat intelligence, exploitability and asset criticality.
• Define and manage remediation SLAs, including escalation pathways to senior technology and risk stakeholders.
• Deliver reporting and insights to engineering teams, executives and board‑level audiences.
• Ensure compliance with regulatory and audit requirements.
• Lead tooling strategy, integration and vendor management for the exposure management ecosystem.
• Build, lead and develop a high‑performing team of specialists and define a multi‑year roadmap aligned with ANZ’s risk appetite.

Required profile

• Proven experience leading vulnerability or exposure management programmes in large, complex organisations.
• Strong understanding of cyber risk, threat intelligence and regulatory compliance.
• Demonstrated ability to influence senior stakeholders and drive cross‑functional initiatives.
• Experience managing and developing specialist security teams.

Required skills

• Vulnerability scanning
• Threat intelligence
• Risk assessment and prioritisation

What we offer

• Opportunity to shape cyber security strategy for a major Australian bank.
• Leadership role with global impact.
• Competitive remuneration and benefits.