Continuous Threat Exposure Management (CTEM) Specialist

Remote – C2H – Jan/Feb conversion to FTE

Circa $100 per hour

Cybersecurity | Programme Development & Operationalisation

We’re looking for a Continuous Threat Exposure Management (CTEM) specialist to help develop and operationalise an enterprise-wide approach to identifying, validating, prioritising and remediating cyber exposures for an Insurance client.

Working closely with the CISO, you’ll help establish a continuous, risk-led security capability that goes beyond traditional vulnerability management, connecting people, processes and technologies to reduce the organisation’s real-world exposure to cyber threats.

What you’ll be doing

• Develop and evolve the organisation’s CTEM strategy, roadmap and operating model.
• Establish or mature the five core CTEM stages: scoping, discovery, prioritisation, validation and mobilisation.
• Bring together exposure data across vulnerability management, external attack surface management, cloud security, identity and threat intelligence.
• Implement risk-based prioritisation that considers exploitability, business criticality and attack paths.
• Validate exposures through attack-path analysis, penetration testing, adversary simulation and other security validation techniques.
• Establish effective remediation workflows with infrastructure, cloud, application and security teams.
• Define programme metrics, governance and reporting to demonstrate measurable reductions in cyber risk.
• Advise the CISO and senior stakeholders on capability gaps, technology investments and continuous improvement.

What we’re looking for

• Demonstrable experience in CTEM, continuous exposure management, attack surface management or a closely related cybersecurity discipline.
• Strong understanding of risk-based exposure prioritisation, vulnerability management and security validation.
• Experience integrating security tools, data and workflows to improve visibility and remediation.
• The ability to translate technical findings into actionable business risk reduction.
• Experience working with senior security stakeholders and influencing teams across a complex technology environment.
• A practical, delivery-focused approach to developing and improving security capabilities.

Highly desirable

• Experience building a CTEM or enterprise exposure management programme from the ground up.
• Experience defining a target operating model, selecting and integrating tooling, and establishing programme governance.
• A track record of demonstrably improving exposure management maturity and reducing exploitable risk.

The ideal candidate combines strong technical security knowledge with the ability to turn strategy into an effective, continuously operating capability.