Head of Cyber Exposure & Assurance

About the role

As Head of Cyber Exposure & Assurance you will shape how cyber risk is discovered, prioritised and validated across Erste Digital and the wider Group. You will lead a team that makes exposure visible, guides stakeholders to appropriate security treatments and provides evidence that protections work against realistic attack techniques.

Key responsibilities

• Set direction for exposure discovery, prioritisation, monitoring, advisory and validation activities.
• Translate large volumes of technical findings, compliance gaps and architectural debt into actionable remediation guidance for technology owners.
• Use offensive testing and responsible disclosure to validate controls and feed evidence back into architecture and operations.
• Design capabilities to be reusable across the Group, creating blueprints, patterns and standards that add value beyond Erste Digital.

Required profile

• Leadership experience in vulnerability/exposure management, security assurance, advisory or offensive security.
• Broad technical understanding with ability to distinguish material security issues from noise.
• Strong communication skills to convey complex findings and trade‑offs without alarmism.
• Proven ability to navigate ambiguity, build alignment across organisational boundaries and turn strategy into concrete delivery.

What we offer

• Special conditions for financial services, supermarkets, clothing stores and many other partners.
• Employee Referral Program with rewards for successful hires.
• Competitive performance‑related salary, minimum €85,000 gross per year, negotiable based on experience.