Exposure Management Senior Advisor 

Company

Federal Reserve Bank of Richmond

When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems.

We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic and diverse team for our future.

The Information Security & Policy portfolio collaborates with business areas to address current and future cybersecurity threats across the enterprise, enforce SAFR and security policy, provide strategic and cost-effective services to its stakeholders, and protect the availability, confidentiality and integrity of Federal Reserve assets.

The selected candidate will reside within a reasonable commuting distance, as defined by the employing Reserve Bank, and will work full-time onsite.

Eligible Locations for Hire: Boston, MA- New York, NY- Philadelphia, PA- Cleveland, OH- Richmond, VA- Atlanta, GA- Chicago, IL- St.

Louis, MO- Minneapolis, MN- Kansas City, MO- Dallas, TX- San Francisco, CA

The Exposure Management Senior Advisor is responsible for continuously identifying, assessing, validating, and reducing the organization’s cyber exposures across on‑premises, cloud, and hybrid environments.

This role integrates attack surface discovery, vulnerability insights, misconfiguration analysis, identity exposure review, and business context to provide a unified view of cyber risk. Working closely with the Product Manager, this role translates program strategy and user needs into actionable features, configurations, integrations, and workflows that enable the Exposure Management program.  

 

Key Responsibilities 

Platform Operations & Service Delivery 


* Own the day-to-day operation and health of the Exposure Management SaaS platform, ensuring uptime, performance, and user access. 



* Manage platform configurations, user roles, integrations, data feeds, and API connections to support continuous exposure visibility. 



* Coordinate with vendors and internal IT teams to resolve technical issues, deploy updates, and maintain platform stability. 



* Ensure the platform scales to support evolving environments (cloud, identity, SaaS, on-premises). 

Data Integration & Workflow Optimization 


* Coordinate integration of exposure data sources including vulnerability scanners, cloud security posture management (CSPM), cloud infrastructure entitlement management (CIEM), external attack surface management (EASM), asset inventories, and threat intelligence feeds. 



* Design and optimize workflows for exposure discovery, risk scoring, validation, remediation assignment, and tracking to align with Exposure Management cycles. 

Exposure Identification & Risk Analysis 


* Discover, map, and inventory external and internal attack surfaces across cloud, on premise, network, application, and SaaS ...