Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 2 days ago

Lead Continous Threat Exposure Manager

Optimal Growth Technologies84 open roles

Where
Johannesburg, South Africa
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Continous Threat Exposure ManagerOptimal Growth Technologies · Johannesburg, South Africa

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Optimal Growth Technologies's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Optimal Growth Technologies postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: first seen 2 days ago

Optimal Growth Technologies median: 2 days open

The posting

Lead, Continuous Threat Exposure Management

Contract duration: 12 months

Location: Midrand

Role Purpose

Lead the establishment, operation and continuous improvement of companies Continuous Threat Exposure Management capability. The role is accountable for providing a unified, risk-based view of cyber exposure across critical business services, infrastructure, telecommunications platforms, cloud environments, applications, APIs, identities, data, AI systems and approved third parties.

The role will drive the complete exposure lifecycle, from discovery and prioritisation through remediation, validation, exception management and executive reporting, with success

measured by verified risk reduction rather than vulnerability volumes.

Key Accountabilities

  • Define and maintain the exposure-management strategy, operating model, roadmap, governance framework, standards and performance measures.
  • Establish continuous discovery and reconciliation of assets and exposures against authoritative inventories.
  • Integrate and correlate findings from vulnerability management, attack-surface management, cloud, identity, application-security testing, penetration testing, threat intelligence, incidents, audits and control-assurance activities.
  • Prioritise exposures using business criticality, customer impact, internet exposure,reachability, attack paths, privilege, known exploitation, threat intelligence, CVSS, CISA KEV and EPSS, rather than technical severity alone.
  • Maintain a single governed exposure backlog with accountable owners, required actions, target dates, dependencies, exceptions, evidence and audit trails.
  • Coordinate remediation across infrastructure, network, cloud, application, identity, supplier, business and market teams.
  • Lead urgent escalation and coordinated response for actively exploited vulnerabilities, credible zero-days, exposed privileged paths and critical control failures.
  • Establish independent, evidence-based validation of remediation and ensure exposures are reopened where validation fails or evidence is insufficient.
  • Govern time-bound risk acceptances, compensating controls and escalation of overdue exposures, ownership gaps and remediation blockers.
  • Provide operational and executive reporting on exposure coverage, critical attack paths, ageing, remediation performance, exceptions, recurring issues and verified risk reduction.
  • Manage exposure-management tooling, integrations, data quality, automation and supporting service-provider performance.
  • Convert recurring exposure themes into systemic control improvements, architecture changes, security testing, supplier actions or problem-management initiatives.
  • Coverage of priority business services and critical technology assets
  • Reduction in critical attack paths and known-exploited exposures
  • Remediation performance against approved targets
  • Reduction in overdue, recurring and reopened exposures
  • Percentage of material exposures with accountable owners
  • Quality and timeliness of risk acceptances
  • Successful independent validation of exposure closure
  • Demonstrable and sustained reduction in residual cyber risk
  • Relevant degree or equivalent experience in cybersecurity, technology, engineering or risk management.
  • Significant experience leading vulnerability management, exposure management, cyber-risk reduction, security testing or a related enterprise security capability.
  • Strong knowledge of infrastructure, cloud, identity, application, API, network and telecommunications security.
  • Experience coordinating remediation across complex technology and business environments.
  • Strong understanding of attack-path analysis, threat-informed prioritisation, security assurance and exception governance.
  • Experience managing executive reporting, governance forums, senior stakeholders and service providers.
  • Relevant certification such as CISSP, CISM, CRISC, CCSP, OSCP or GIAC is advantageous.
  • Knowledge of NIST CSF 2.0, MITRE ATT&CK, CISA KEV and FIRST EPSS is advantageous.

Experience and Qualifications

Key Competencies

Strategic leadership, business-focused risk judgement, stakeholder influence, executive communication, analytical decision-making, delivery discipline, constructive challenge and the ability to coordinate action during urgent cyber exposure events.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Optimal Growth Technologies's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Optimal Growth Technologies's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Optimal Growth Technologies's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.