Head of Threat & Vulnerability Management
We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience.
Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading vulnerability discovery, scanning, validation and prioritisation across infrastructure, cloud, applications, endpoints and third-party services; and overseeing penetration testing, red-team activity and threat-led assessments. You will establish risk-based remediation processes, define meaningful performance indicators and provide clear reporting to senior stakeholders. The role will also involve monitoring the evolving threat landscape, translating intelligence into actionable security improvements, managing suppliers and budgets, and supporting incident response and security architecture decisions where vulnerabilities or emerging threats require urgent attention. You will lead, coach and develop a specialist team while promoting effective collaboration across the wider security function.
Applicants should bring substantial experience in cyber security, with a strong background in threat management, vulnerability management, penetration testing or security assurance, ideally within a complex and highly regulated environment. You will have a proven record of developing security programmes, influencing senior decision-makers and delivering measurable risk reduction across large and varied technology estates. Strong knowledge of vulnerability and threat management frameworks, security tooling, cloud environments, application security and common attack techniques is essential. Relevant professional certifications, such as CISSP, CISM, OSCP, CREST or equivalent, are desirable. Excellent communication, stakeholder management, analytical and leadership skills are required, together with the judgement to balance technical risk, operational priorities and business needs.
Head of Threat & Vulnerability Management
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer