Head of Threat & Vulnerability Management

Reference: 9nk3pwzjog3t110wu1hm

We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience.

Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading vulnerability discovery, scanning, validation and prioritisation across infrastructure, cloud, applications, endpoints and third-party services; and overseeing penetration testing, red-team activity and threat-led assessments. You will establish risk-based remediation processes, define meaningful performance indicators and provide clear reporting to senior stakeholders. The role will also involve monitoring the evolving threat landscape, translating intelligence into actionable security improvements, managing suppliers and budgets, and supporting incident response and security architecture decisions where vulnerabilities or emerging threats require urgent attention. You will lead, coach and develop a specialist team while promoting effective collaboration across the wider security function.

Applicants should bring substantial experience in cyber security, with a strong background in threat management, vulnerability management, penetration testing or security assurance, ideally within a complex and highly regulated environment. You will have a proven record of developing security programmes, influencing senior decision-makers and delivering measurable risk reduction across large and varied technology estates. Strong knowledge of vulnerability and threat management frameworks, security tooling, cloud environments, application security and common attack techniques is essential. Relevant professional certifications, such as CISSP, CISM, OSCP, CREST or equivalent, are desirable. Excellent communication, stakeholder management, analytical and leadership skills are required, together with the judgement to balance technical risk, operational priorities and business needs.

£100,000.00
Per annum
Added 06/10/2026
Reference: 9nk3pwzjog3t110wu1hm

Head of Threat & Vulnerability Management

Manchester, England, United Kingdom Permanent Threat Management

Other similar jobs

Head of Vulnerability Management - Government Digital Service - G6

Added 15/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a mature, risk-based vulnerability management capability across a complex digital and technology estate. This is a senior role requiring strong leadership, sound technical judgement and the ability to influence stakeholders at all levels. You will set the strategic direction for identifying, assessing, prioritising and remediating vulnerabilities, ensuring that security risks are understood and managed effectively. You will oversee vulnerability scanning, threat intelligence, exposure assessment, remediation tracking and reporting across infrastructure, applications, cloud services and third-party environments. Working closely with cyber security, architecture, engineering, service...

Learn more

Head of Vulnerability Management

Added 14/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a comprehensive, risk-based vulnerability management programme. This is a strategic leadership role responsible for reducing cyber risk across a complex technology environment, including cloud platforms, on-premises infrastructure, applications, endpoints and third-party services. You will define the vulnerability management vision, establish effective governance and ensure that security risks are identified, prioritised and remediated in line with business objectives and regulatory expectations. You will lead a team of vulnerability management specialists and work closely with Security Operations, Infrastructure, Engineering, Architecture, Risk, Compliance and Technology leadership. Responsibilities...

Learn more

Vice President, Threat and Vulnerability Management Engineer

Added 12/10/2026

We are seeking a Vice President, Threat and Vulnerability Management Engineer to lead the strategy, architecture, and execution of enterprise-wide cyber risk reduction initiatives. This senior role will combine technical leadership with programme ownership, overseeing the identification, assessment, prioritisation, and remediation of vulnerabilities across infrastructure, applications, cloud environments, endpoints, and emerging technologies. The successful candidate will establish a risk-based vulnerability management framework aligned with business objectives, regulatory expectations, and industry best practice. Responsibilities will include directing vulnerability discovery and assessment activities, improving scanning and validation capabilities, and developing effective remediation processes with technology and business teams. You will define risk...

Learn more

Vulnerability, Threat & Exposure Management Analyst

Added 25/09/2026

We are seeking a Vulnerability, Threat & Exposure Management Analyst to strengthen the organisation’s ability to identify, assess and reduce cyber risk across its technology estate. In this role, you will support the continuous management of vulnerabilities, threats and external exposures, helping security and technology teams prioritise remediation based on business impact, exploitability and threat intelligence. You will work with stakeholders across infrastructure, applications, cloud, networks and business operations to promote effective risk reduction and resilient security practices. Key responsibilities will include coordinating vulnerability scanning and exposure assessments, validating findings, analysing trends and producing clear risk-based reports for technical and...

Learn more

Vice President, Threat and Vulnerability Management Team Lead

Added 21/08/2026

We are seeking a highly skilled and experienced Vice President of Threat and Vulnerability Management Team Lead to oversee our cybersecurity strategy and operations. In this leadership role, you will be responsible for developing and implementing comprehensive threat and vulnerability management programs, ensuring the protection of our organization’s assets against emerging cyber threats. You will lead a team of cybersecurity professionals, fostering a culture of proactive risk management and continuous improvement. Your primary responsibilities will include assessing current security measures, identifying vulnerabilities, and developing strategies to mitigate risks. You will also be tasked with collaborating across departments to ensure alignment...

Learn more

Cyber Security Engineer (Vulnerability Management)

Added 09/10/2026

We are seeking a Cyber Security Engineer specialising in Vulnerability Management to help identify, assess and reduce security risks across a complex technology environment. You will be responsible for operating and improving vulnerability management processes, ensuring that weaknesses in infrastructure, applications, cloud services and endpoints are detected, prioritised and remediated effectively. Working closely with security, infrastructure, application development and operational teams, you will provide practical guidance that strengthens the organisation’s overall security posture. Key responsibilities will include configuring and maintaining vulnerability scanning tools; planning and executing authenticated and unauthenticated scans; validating findings; and analysing results to distinguish genuine risks from...

Learn more

Vulnerability Management Engineer (12 Month FTC)

Added 28/09/2026

We are seeking a Vulnerability Management Engineer for a 12-month fixed-term contract to support the identification, assessment and remediation of security vulnerabilities across a complex technology environment. This role will be responsible for helping strengthen the organisation’s security posture by ensuring vulnerabilities are accurately identified, prioritised according to risk and addressed within agreed timescales. You will manage and improve vulnerability scanning processes across infrastructure, endpoints, applications and cloud environments, working with security, infrastructure, development and service teams to investigate findings and coordinate remediation activity. Responsibilities will include configuring and maintaining vulnerability management tools, reviewing scan results, validating false positives, producing...

Learn more

Assistant Vice President, Vulnerability Management

Added 24/09/2026

We are seeking an experienced Assistant Vice President, Vulnerability Management to lead and mature an enterprise-wide programme for identifying, assessing, prioritising and remediating security vulnerabilities. This senior leadership role will establish a proactive, risk-based approach to vulnerability management across infrastructure, applications, cloud environments, endpoints and third-party services. You will provide strategic direction while ensuring effective operational delivery, clear governance and measurable improvements in the organisation’s security posture. Key responsibilities include defining the vulnerability management strategy, policies, standards and operating model; overseeing vulnerability scanning, validation, threat-informed prioritisation and remediation tracking; and ensuring timely escalation of critical risks. You will partner closely...

Learn more

Vulnerability Management Analyst

Added 14/09/2026

We are seeking a Vulnerability Management Analyst to support the identification, assessment, prioritisation, and remediation of security weaknesses across a complex technology environment. In this role, you will help reduce cyber risk by coordinating vulnerability management activities across infrastructure, applications, cloud services, endpoints, and network devices. You will work closely with security, infrastructure, development, and service teams to ensure vulnerabilities are understood, addressed, and tracked through to resolution. Your responsibilities will include operating and maintaining vulnerability scanning tools, reviewing scan results, validating findings, and assessing vulnerabilities based on severity, exploitability, asset criticality, and business impact. You will produce clear reports...

Learn more

Vulnerability Management Lead

Added 11/09/2026

We are seeking a Vulnerability Management Lead to develop and oversee a proactive, risk-based vulnerability management programme across a complex technology estate. You will provide strategic direction while remaining engaged with the operational detail required to identify, assess, prioritise and remediate vulnerabilities across infrastructure, applications, cloud services, endpoints and third-party environments. Working closely with security, technology, engineering and business stakeholders, you will help reduce exposure to cyber threats and strengthen the organisation’s overall security posture. Key responsibilities will include defining vulnerability management standards, processes and performance measures; managing vulnerability scanning, assessment and validation activities; and ensuring findings are accurately risk-rated,...

Learn more

Vulnerability Management Analyst

Added 08/09/2026

We are seeking a Vulnerability Management Analyst to support the identification, assessment, prioritisation and remediation of security vulnerabilities across a diverse technology environment. In this role, you will work closely with infrastructure, application development, cloud, networking and service management teams to reduce organisational exposure and strengthen overall cyber resilience. You will help maintain accurate vulnerability information, provide clear risk-based insight and support timely remediation of issues across on-premises and cloud-based systems. Key responsibilities include operating and monitoring vulnerability scanning tools, validating scan results, investigating false positives and correlating findings with asset criticality and business impact. You will analyse vulnerability data,...

Learn more

Senior Security Architect - SecOps and Vulnerability Management

Added 07/09/2026

We are seeking a Senior Security Architect to lead the design and continuous improvement of SecOps and vulnerability management capabilities across a complex technology environment. This is a strategic and hands-on role for an experienced security professional who can translate business and technology risks into practical, resilient security solutions. You will define architecture principles, security standards and operating models that strengthen the organisation’s ability to identify, assess, prioritise and respond to cyber threats. Key responsibilities will include developing and maintaining security architecture for security operations, vulnerability management, threat detection, incident response and security monitoring. You will evaluate existing controls, identify...

Learn more

Senior Vulnerability Management Analyst- CIO- BPL

Added 07/09/2026

We are seeking a Senior Vulnerability Management Analyst to lead the identification, assessment, prioritisation, and remediation of security vulnerabilities across a complex technology environment. This role will play a key part in strengthening cyber resilience by turning vulnerability data into clear, actionable insight for technical teams and senior stakeholders. You will work closely with infrastructure, application, cloud, and security teams to ensure vulnerabilities are managed consistently and within agreed risk tolerances. Key responsibilities will include operating and improving vulnerability management processes; configuring and maintaining vulnerability scanning and reporting tools; analysing scan results, threat intelligence, exploitability, and business context; and prioritising...

Learn more

Vulnerability Management Engineer

Added 04/09/2026

We are seeking a Vulnerability Management Engineer to help identify, assess, prioritise, and reduce security weaknesses across a complex technology environment. In this role, you will support the full vulnerability management lifecycle, from discovery and validation through remediation, reporting, and risk acceptance. You will work closely with infrastructure, cloud, application, endpoint, and operations teams to ensure vulnerabilities are addressed in line with defined service levels and business priorities. Your responsibilities will include configuring and maintaining vulnerability scanning and assessment tools; developing authenticated and unauthenticated scan policies; analysing results to remove false positives and identify meaningful risk; and producing clear reports...

Learn more

Vulnerability Management Analyst- CIO- BPL

Added 03/09/2026

We are seeking a Vulnerability Management Analyst to support the identification, assessment, prioritisation and remediation of security vulnerabilities across a complex technology environment. You will help protect critical systems, applications, networks and data by ensuring vulnerabilities are discovered promptly, evaluated accurately and addressed within agreed service levels. The role will involve working closely with infrastructure, application development, cloud, operations and risk teams to improve the organisation’s overall security posture. Your responsibilities will include operating and maintaining vulnerability scanning and management tools; coordinating authenticated and unauthenticated scans; validating findings and reducing false positives; analysing vulnerability data and emerging threats; and producing...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.