What's Happening?
Nordstrom is actively recruiting for a Cybersecurity Manager, Vulnerability/Exposure Management, for a hybrid role based in Seattle, Washington. This position is critical for leading Nordstrom's attack surface management team and its enterprise exposure
reduction program. The manager will be responsible for overseeing a team of analysts, mapping the company's attack surfaces, prioritizing vulnerabilities, and coordinating remediation efforts across cloud, on-premises, and third-party environments. Key responsibilities also include improving security processes, automating tasks, applying threat intelligence and artificial intelligence, managing security tools and vendors, supporting compliance activities, and presenting risk metrics to senior leadership. Candidates are required to work in the Nordstrom corporate headquarters a minimum of four days per week.
Why It's Important?
This hiring initiative underscores Nordstrom's commitment to strengthening its cybersecurity posture in an increasingly complex digital landscape. As a major retail company, Nordstrom handles vast amounts of sensitive customer data and operates extensive online and physical infrastructures, making it a prime target for cyber threats. The role's focus on attack surface management and vulnerability reduction is crucial for protecting customer information, maintaining operational integrity, and safeguarding the company's reputation. Effective cybersecurity leadership in this area can prevent costly data breaches, minimize business disruptions, and ensure compliance with data protection regulations. The integration of AI and threat intelligence in the role highlights the evolving nature of cybersecurity, where proactive and intelligent defense mechanisms are becoming essential to counter sophisticated cyberattacks.
What's Next?
The successful candidate will be instrumental in shaping Nordstrom's future cybersecurity strategies and operational resilience. The immediate next steps will involve building and developing the attack surface management team, setting a clear roadmap for the program, and implementing new capabilities to enhance visibility into exposures. This will include continuous improvements in processes, methodologies, and security toolsets, with a strong emphasis on automation and the application of emerging AI technologies. The manager will also need to foster strong collaborations with other cybersecurity and technology teams to ensure a unified approach to risk management and remediation. The ongoing evolution of cyber threats will necessitate continuous adaptation and innovation in Nordstrom's security practices.
Beyond the Headlines
The demand for specialized cybersecurity roles like Attack Surface Management Manager reflects a broader industry trend where companies are moving beyond reactive security measures to more proactive and preventative strategies. The hybrid work model for this position also indicates how companies are balancing the need for in-person collaboration in critical security functions with flexible work arrangements. The emphasis on AI and threat intelligence in the job description points to the increasing reliance on advanced technologies to combat cyber threats, transforming the skill sets required in the cybersecurity field. This role is not just about technical expertise but also about leadership, strategic thinking, and the ability to communicate complex risks to non-technical stakeholders, highlighting the growing importance of cybersecurity at the executive level.
