Head of Cyber Exposure & Assurance

About the role

As Head of Cyber Exposure & Assurance you will lead the capability that makes cyber exposure visible across Erste Digital and the wider Erste Group. You will be accountable for shaping processes, guiding stakeholders and delivering evidence that security controls work against realistic attack techniques.

Key responsibilities

• Define direction for exposure discovery, prioritisation, monitoring, advisory and validation activities.
• Transform large volumes of technical findings and compliance gaps into actionable remediation guidance for technology owners.
• Use offensive testing and responsible disclosure to validate controls and feed evidence back into architecture and operations.
• Build trusted relationships with business and technology owners to move from findings to practical remediation.
• Design capabilities that can be reused across the Group, creating blueprints, patterns and standards.

Required profile

• Leadership experience in vulnerability/exposure management, security assurance, advisory or offensive security.
• Broad technical understanding with the ability to distinguish material security issues from noise.
• Strong communication skills to convey complex findings and trade‑offs without alarmism.
• Proven ability to navigate ambiguity, build alignment across organisational boundaries and turn strategy into delivery.

What we offer

• Work‑life balance benefits: sabbatical, paternity leave, marriage & childbirth contributions, 4 extra holidays, 3rd pillar contribution and MultiSport card.
• Competitive performance‑related salary (minimum EUR 4,500 gross per month) and openness to discuss expectations.
• Employee referral programme with rewards for successful hires.