Job detail for Director - Exposure Management

About the Opportunity

Job Type: Permanent

Application Deadline: 16 October 2026

Title Director - Exposure Management

Department    Global Cyber & Information Security

Location UK / IRE

Reports To Head of Cyber & Information Security (CISO)

Level 8

We’re proud to have been helping our clients build better financial futures for over 50 years. How have we achieved this? By working together - and supporting each other - all over the world. So, join our team and feel like you’re part of something bigger.

About your team

Global Cyber & Information Security (GCIS) protects Fidelity International by reducing cyber risk, strengthening resilience and enabling trusted digital services. The Exposure Management team brings together vulnerability management, cloud posture, infrastructure assurance, application exposure and attack surface reduction to continuously reduce exploitable risk across the firm

About your role

You will lead and build FIL’s Exposure Management capability, creating one coherent function to reduce exploitable risk across infrastructure, cloud, applications and external attack surface. This role is accountable for moving FIL beyond fragmented vulnerability activity toward a broader, threat-informed and engineering-led exposure management model that can operate effectively in a frontier-AI world, where adversaries move faster and exploit weaknesses with greater speed, scale and precision. You will shape the capability as broadly as required, combining strategic leadership, modern engineering thinking and strong delivery oversight to improve how exposure is identified, prioritised and reduced across the firm. Working across GCIS, Technology, engineering, identity, architecture and business leadership, you will drive faster remediation and resilient-by-design outcomes over time. This is a high-impact Grade 8 leadership role with broad enterprise influence and an important contribution to the future depth of cyber leadership within GCIS

About you

You are a senior cyber leader with strong technical depth and a clear engineering mindset, with experience building or reshaping capabilities in areas such as exposure management, security engineering, technical risk reduction, platform security, or closely related domains. You understand how to operate at pace, using automation, modern architecture and product-style ways of working to reduce risk in durable ways, not just manage issues reactively. You bring strong judgment across cloud, infrastructure, application and identity exposure, and understand how frontier AI and agentic AI are changing attacker behaviour, defensive operating models and the need for more engineered control outcomes. You are comfortable leading through influence, shaping decisions across teams you do not directly manage, and translating complex technical exposure into clear business priorities for senior stakeholders.

Feel rewarded

For starters, we’ll offer you a comprehensive benefits package. We’ll value your wellbeing and support your development. And we’ll be as flexible as we can about where and when you work – finding a balance that works for all of us. It’s all part of our commitment to making you feel motivated by the work you do and happy to be part of our team. For more about our work, our approach to dynamic working and how you could build your future here, visit careers..com.

For more about our work, our approach to dynamic working and how you could build your future here, visit careers..com.