Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Director, Technology (Threat Exposure & Assurance Management) role.

Rezi rewrites your resume against American Electric Power's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Director, Technology (Threat Exposure & Assurance Management) posting at American Electric Power — free, in seconds.

About the Role

The Director of Threat Exposure & Assurance Management is a senior technology leader responsible for enterprise services. This role requires broad knowledge of infrastructure, networks, applications, platforms, and cloud, with technical depth in at least one domain and strong security, vulnerability, and risk-analysis expertise. As the CITO organization's liaison, the Director coordinates priorities, governance, and assurance, while technology owners execute remediation. This role owns the speed and consistency of CITO execution and measurable risk reduction, translating findings into practical engineering and operational work.

Responsibilities

Define and execute an enterprise technology remediation strategy aligned with Enterprise Cybersecurity policy, AEP risk tolerance, and regulatory obligations.
Own the end-to-end remediation lifecycle, including intake, technical triage, owner assignment, tracking, validation, and closure.
Establish service levels by severity and asset criticality, holding delivery teams accountable for committed timelines.
Prioritize work using exploitability, active exploitation, exposure, service dependencies, asset criticality, and business impact.
Translate findings into executable engineering and operational work with clear ownership and acceptance criteria.
Coordinate cross-team delivery with technology owners, engineering, and operations.
Ensure plans address testing, change and release approvals, maintenance windows, patch deployment, rollback readiness, and service availability.
Integrate remediation into application and service lifecycle processes.
Lead the CITO response to emergency vulnerabilities and zero-day exposures in partnership with Enterprise Cybersecurity.
Coordinate impact assessment, containment, compensating controls, patching, validation, and timely executive reporting.
Serve as the single, accountable security liaison between Enterprise Cybersecurity and the CITO organization.
Operate the central hub that translates security requirements, findings, and directives into prioritized work for technology spokes.
Build durable relationships with infrastructure, network, application, platform, cloud, and operations leaders.
Resolve competing remediation priorities and negotiate resource allocation and sequencing with technology leaders.
Partner with architecture and engineering to evaluate trade-offs among security, scalability, reliability, availability, operational stability, and change risk.
Coordinate compensating controls and documented exceptions or risk-acceptance requests when immediate remediation is not feasible.
Route decisions through established governance to authorized approvers.
Maintain disciplined governance for intake, escalation, exceptions, and change execution.
Report remediation posture, progress, and residual risk with clear ownership and business context.
Govern vendor and partner commitments to ensure verifiable outcomes without operational fragility.
Drive patching and technology lifecycle modernization, configuration hardening, certificate and secrets management, identity and access improvements, and attack-surface reduction.
Eliminate systemic causes of recurring vulnerabilities through engineering standards, automation, and sustainable operating practices.
Apply Lean practices to reduce cycle time, manual effort, and handoff friction.
Use analytics and dashboards to expose bottlenecks, trends, and root causes.
Define, track, and report open vulnerabilities by severity, mean time to remediate, service-level attainment, backlog age, recurrence, and scan coverage.
Use measures to improve execution and demonstrate risk reduction.
Build and lead a technically credible hub team through hiring, coaching, performance management, talent development, and succession planning.
Foster an inclusive culture of collaboration, accountability, and continuous learning.
Enable the extended community of remediation owners with practical playbooks, escalation paths, and shared delivery expectations.

Requirements

Minimum of 10 years of relevant work experience, including 6 years in a leadership role.
Substantive enterprise IT engineering, operations, or technology delivery responsibilities.
Demonstrated leadership of cross-team technology execution.
Proven experience delivering and operating enterprise technology services.
Experience implementing production changes, coordinating engineering and operations teams, and managing service dependencies and operational trade-offs.
Broad working knowledge of enterprise infrastructure, networking, applications, platforms, and cloud.
Substantive hands-on engineering, operations, or delivery experience and technical depth in at least one domain.
Ability to evaluate remediation plans across domains.
Strong knowledge of security principles, vulnerability management, threat exposure, risk analysis, and remediation practices.
Ability to interpret security findings and threat intelligence, assess exploitation potential and business impact, and evaluate compensating controls.
Ability to translate risk into practical technology decisions and measurable outcomes.
Demonstrated ability to influence without direct authority, align technology owners, resolve competing priorities, and sequence work across organizational boundaries.
Experience building and coaching teams, improving operating processes, and communicating technical risk and delivery trade-offs to executive, security, and technology stakeholders.
Experience translating regulatory and compliance obligations into technology operations across complex enterprise environments.
Experience integrating vulnerability tools with asset, service, and delivery processes.
Experience using automation, analytics, and root-cause analysis to reduce recurring exposure.
Experience supporting technology modernization and a commitment to a secure, resilient, and sustainable energy future.

Skills

Infrastructure
Networks
Applications
Platforms
Cloud
Security
Vulnerability management
Risk analysis
Threat intelligence
Remediation strategy
Service level management
Exploitability assessment
Business impact analysis
Cross-team coordination
Change management
Release management
Patch deployment
Rollback planning
Service availability
Lifecycle process integration
Emergency vulnerability response
Zero-day exposure management
Impact assessment
Containment strategies
Compensating controls
Executive reporting
Vendor management
Technology modernization
Configuration hardening
Certificate management
Secrets management
Identity and access management
Attack-surface reduction
Engineering standards
Automation
Sustainable operating practices
Lean practices
Analytics
Dashboards
Root cause analysis
Performance management
Talent development
Succession planning
Playbook development
Escalation path management
Regulatory compliance
Automation
Analytics
Root-cause analysis

Location

American Electric Power (On-Site)

Work Type

On-Site

Experience Level

Minimum of 10 years of relevant work experience
6 years in a leadership role

Education Level

Bachelor’s degree in computer science, engineering, information security, business or a related technical field, or an equivalent combination of education and related experience.

Salary/Compensations

$188,524.00 - $245,080.00

About the Company

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions.
Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities.
If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Equal Opportunity

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law.
When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.