More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over ** employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.
We are looking for an Exposure Management Manager, working close to one of our main clients in banking sector.
You will manage key processes within our Exposure Management initiative, starting with Security Baseline Configuration (SBC) as an initial focus, while supporting broader vulnerability response and exposure management activities over time. This position offers collaboration with senior security experts, visibility across general technology teams, and opportunities to shape the evolution of our security compliance framework.
Security Baseline Governance: Assist Application Responsibles (AR), Technology Responsibles (TR), and IT Service Owners (ITSO) in fulfilling their SBC and vulnerability management responsibilities.
Compliance Oversight: Monitor coverage and compliance deviations, follow up on remediation plans, and ensure issues are addressed promptly.
Future Planning: Help define and track long-term initiatives, such as onboarding new technologies (e.g., Azure cloud) and introducing new SBC rules.
Exposure Management: Support the response process for vulnerabilities tracked in ServiceNow Vulnerability Response (VR),



ensuring timely and audit-compliant resolution.
Bachelor's degree in computer science, information security, or equivalent practical experience.
3–5 years of experience in IT/security governance, compliance, or vulnerability management.
Strong organizational and time-management skills; Excellent communication and stakeholder management skills, with a proactive and solution-oriented mindset.
Foundational understanding of security configuration standards (e.g., CIS benchmarks, hardening guidelines) and vulnerability management principles.
Experience using ServiceNow or similar ITSM/GRC platforms.
Good english level (C1) you will be working with international teams.
Experience with cloud security (Azure preferred) and baseline configuration frameworks.
Nexpose) and exposure management workflows.
IT or Security certifications (e.g., Security+, CISM, CISSP).
Hybrid. 3 days a week in the office + 2 days remote.
Business Hours. No intensive working days for friday or summer.
Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).
Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan...)
Free access to several training platforms
Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime...)
software development,compliance,security management,cloud security,
#

📌 Exposure Management Manager (Madrid)
🏢 Talantir
📍 Madrid