Attack Surface Management Manager

Experian Global Security Office are looking for a new Manager of Attack Surface Management (ASM) to play a crucial role in our cybersecurity strategy.

You will guide the success of the Continuous Threat Exposure Management (CTEM) program and build business engagement across global teams. You will ensure CTEM delivers reliable, applicable insights by defining and maintaining processes, integrating services with enterprise systems.

Equally critical is leading the Business Engagement Team to establish trusted partnerships with regional infrastructure and application partners, aligning vulnerability management strategies with priorities. Through technical leadership and strategic influence, you will strengthen Experian's security posture and reduce risk across its global attack surface.

This is an UK based hybrid (40% in office) position reporting to the Information Security Director for Cloud and Attack Surface Management.

Primary Focus:-

Lead CTEM Service Delivery: Manage processes for the Continuous Threat Exposure Management (CTEM) service and its provider. Ensure integration with Experian systems, delivering, reliable, and applicable security insights that inform risk reduction across the enterprise.

Business Engagement: You will manage the Business Engagement Team and Service, providing expertise and strategic direction. Cultivate partnerships with regional infrastructure and application teams to ensure the vulnerability management strategy is understood, agreed upon, and implemented.

Other Responsibilities:-

• Maintain risk stratification model to guide vulnerability prioritization based on threat and asset criticality; Identify vulnerability prioritization and asset coverage trends, escalating to senior leadership when vulnerability trends are not improving over time.
• Help with response to cybersecurity incidents or threat informed actions, ensuring accurate identification of applicable internal and external risks. Will use a broad and diverse combination of tools, techniques, and data sources to support highest confidence in attack surface discovery.
• Guide team members' daily project and operational activities
• Contribute to security and technology strategic planning to mature our programmes
• Work with Risk & Compliance teams on SOC 2, PCI DSS, HIPAA, and other audits.
• Research and recommend policy and procedures as they relate to Attack Surface Management