{"id":2054338,"url":"https://alion.io/job/fifth-third-bank-principal-exposure-analysis-coordination","title":"Principal, Exposure Analysis & Coordination","company":{"id":1165,"name":"Fifth Third Bank","domain":"53.com","url":"https://alion.io/company/fifth-third-bank","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":90,"open_postings":41,"ghost_share":0,"stale_share":0.39,"repost_share":0.049,"time_to_fill_p50_days":27,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cincinnati, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":96500,"max":207500,"currency":"USD","period":"year","gross":null,"usd_annual":207500},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-07T22:56:16Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-29T03:26:07Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Make banking a Fifth Third better®\nWe connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.\nThe Principal, Exposure Analysis & Coordination is responsible for leading the Bank's capability to assess, coordinate, and manage response to urgent cybersecurity exposures. This role focuses on emerging threats that require rapid enterprise coordination, including zero-day vulnerabilities, pre-CVE and non-CVE security issues, vendor advisories, third-party product exposures, cloud security concerns, and other significant cybersecurity risks that may not fit traditional vulnerability management processes.\nWorking across Information Security, Technology, Risk, Legal, and business teams, the Principal provides leadership during active exposure events while building a sustainable, repeatable process that improves the organization's ability to respond to future threats.\nExposure Analysis & Coordination Leadership\nLead the Exposure Analysis & Coordination function and serve as the primary authority for enterprise exposure response.\nEstablish and maintain operating procedures, response playbooks, escalation criteria, and engagement models.\nProvide leadership and guidance during active exposure events.\nDrive enterprise-wide coordination across technology, security, risk, and business stakeholders.\nEnsure response activities remain aligned with enterprise risk priorities and regulatory expectations.\nReporting, Metrics & Program Maturity\nDevelop and maintain reporting that provides visibility into active exposures, response effectiveness, remediation progress, and operational trends.\nDefine and monitor key performance indicators and operational metrics.\nIdentify recurring themes, process gaps, and systemic issues through analysis of historical events.\nProvide executive-level reporting and recommendations to support risk-based decision making.\nDrive ongoing maturity of the program through continuous measurement and improvement.\nRoot Cause Analysis & Continuous Improvement\nLead post-event reviews and root cause analysis activities.\nIdentify opportunities to reduce future exposure through process improvements, control enhancements, automation, and governance changes.\nTranslate lessons learned into actionable improvements.\nMaintain and improve response playbooks, procedures, and documentation standards.\nAutomation & Process Optimization\nIdentify, prioritize, and implement opportunities to automate exposure intake, validation, evidence collection, status tracking, reporting, and closure activities.\nDefine automation requirements and partner with security and technology teams to develop secure, reliable and scalable workflows.\nEstablish controls, monitoring, and exception-handling processes to ensure automated workflows remain accurate, auditable, and aligned with risk-management expectations.\nMeasure automation effectiveness and use operational data to reduce manual effort, improve response speed, and strengthen process consistency.\nStakeholder & Executive Engagement\nCommunicate effectively with technical teams, business leaders, and executive stakeholders.\nTranslate technical exposure and remediation information into clear, concise updates tailored to executives and technology owners.\nCommunicate changes in risk, scope, priority, dependencies, and target dates promptly, and confirm stakeholder understanding of required actions.\nProvide clear and concise status updates during active events.\nEscalate significant risks, unresolved issues, and critical decisions as appropriate.\nBuild strong partnerships across security, technology, and business functions.\nQualifications\nRequired\nBachelor's degree in Computer Science/Information Systems or equivalent combination of education and experience. Master's degree a plus.\nIndustry Standard Certifications such as, but not limited to: CompTIA A+, CompTIA Network +, CompTIA Security +, ISC2 CISSP, and EWS are preferred.\nEight+ years of IT work experience relevant to the position, including at least six years in a hands-on information security development role.\nExtensive experience in cybersecurity, vulnerability management, incident response, security operations, technology risk, or related disciplines.\nExperience leading large-scale, cross-functional response or remediation efforts.\nStrong understanding of vulnerability and exposure management practices.\nProven ability to influence stakeholders across a matrixed organization.\nExceptional verbal and written communication skills.\nExperience identifying and delivering workflow automation or orchestration opportunities in vulnerability management.\nAbility to define automation requirements, acceptance criteria, controls, exception handling, and measurable outcomes in partnership with technical teams.\nStrong written and verbal communication skills, including the ability to translate complex technical risk into clear actions and executive-level summaries.\nTechnical Requirements\nHands-on proficiency with Python scripting for workflow automation, data processing, validation, and operational reporting.\nAbility to develop, test, troubleshoot, document, and maintain secure, reusable scripts with appropriate logging, error handling, and exception management.\nExperience integrating systems and working with structured data formats such as JSON and CSV.\nWorking knowledge of source control and collaborative development practices.\nAbility to query, transform, and analyze operational or security data using SQL, Python data libraries, or comparable tools.\nFamiliarity with security platforms, ticketing systems, workflow-orchestration tools, and dashboarding technologies used to automate and monitor exposure-management processes.\nExperience applying generative AI capabilities to vulnerability management use cases.\nPreferred\nHands-on offensive security experience validating real-world exploitability and reachability, including attack paths, access, exposed services, privileges, and security controls.\nExperience using approved offensive security techniques, proof-of-concept testing, and security tools to validate vulnerability conditions and distinguish theoretical severity from demonstrated exposure.\nAbility to partner across security teams and clearly document validation evidence, compensating controls, limitations, and conclusions to inform risk prioritization, remediation, leadership decisions, and auditability.\nValidate the effectiveness of compensating controls (countermeasures) to determine whether existing security controls materially reduce exploitability, reachability, or potential impact, and incorporate the results into exposure and remediation decisions.\nExperience within large, regulated organizations.\nFamiliarity with cloud security, application security, threat intelligence, and vulnerability management technologies.\nExperience presenting to senior leadership and executive audiences.\nPosition not available for immigration sponsorship\nPrincipal, Exposure Analysis & CoordinationTotal Base Pay Range 96,500.00 - 207,500.00 USD Annual\nAt Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be their best every day.\nThe base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.\nOur extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. You can learn more about those programs on our 53.com Careers page at: https://www.53.com/content/fifth-third/en/careers/benefits.html or by consulting with your talent acquisition partner.\nLOCATION -- Cincinnati, Ohio 45202Attention search firms and staffing agencies: do not submit unsolicited resumes for this posting. Fifth Third does not accept resumes from any agency that does not have an active agreement with Fifth Third. Any unsolicited resumes - no matter how they are submitted - will be considered the property of Fifth Third and Fifth Third will not be responsible for any associated fee.\nFifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.","description_format":"text","description_chars":9040,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Information Security","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-10-07T22:56:16Z"},{"event":"close","at":"2026-10-26T09:29:26Z"},{"event":"reopen","at":"2026-10-26T23:49:07Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.804,"p_room":0.75,"age_days":20,"expected_fill_days":27,"reasons":["conf:4","velocity","win:late","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":207500,"is_top_pay":true},"html_url":"https://alion.io/job/fifth-third-bank-principal-exposure-analysis-coordination","json_url":"https://alion.io/job/fifth-third-bank-principal-exposure-analysis-coordination.json","meta":{"generated_at":"2026-10-29T03:30:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5372,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1165},"rest":"https://alion.io/mcp/rest/get_company?id=1165"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffifth-third-bank-principal-exposure-analysis-coordination"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffifth-third-bank-principal-exposure-analysis-coordination"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffifth-third-bank-principal-exposure-analysis-coordination"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fifth-third-bank-principal-exposure-analysis-coordination\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffifth-third-bank-principal-exposure-analysis-coordination"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2054338}},{"tool":"search_jobs","arguments":{"company":"53.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2054338},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}