Senior Director, Exposure & Vulnerability Management

Reference: t60rxe3jjkktl6skpru1

We are seeking a Senior Director, Exposure & Vulnerability Management to lead the development and execution of a global, risk-based programme that identifies, prioritises and reduces cyber exposure across a complex technology estate. This is a senior leadership role with responsibility for setting strategy, strengthening operational resilience and ensuring that vulnerabilities and external attack-surface risks are managed in line with business priorities and regulatory expectations.

You will lead teams responsible for vulnerability assessment, remediation governance, threat-informed prioritisation, attack-surface management and exposure analytics. Working closely with information security, infrastructure, cloud, engineering, enterprise architecture, risk, audit and business stakeholders, you will establish clear ownership, service standards, reporting and escalation routes. Key duties will include overseeing scanning and discovery capabilities, improving asset visibility, defining risk-based remediation requirements, monitoring remediation performance and developing metrics that provide senior leaders with a clear view of material exposure. You will also sponsor the adoption of automation, modern security tooling and intelligence-led approaches to identify weaknesses before they can be exploited.

The successful candidate will bring significant experience leading enterprise-scale vulnerability or exposure management programmes within a complex, highly regulated or global environment. You will have a strong understanding of vulnerability assessment methodologies, common security weaknesses, cloud and application security, attack-surface management, remediation practices and cyber risk governance. Experience managing geographically distributed teams, budgets, strategic suppliers and executive stakeholders is essential, as is the ability to translate technical risk into concise business outcomes. You will be an influential, collaborative leader who can establish accountability, drive change and make sound decisions in a fast-moving environment. Relevant professional qualifications in cyber security, information technology or risk management are desirable, alongside a demonstrable record of building mature, measurable security capabilities.

COMPETITIVE SALARY
Added 16/10/2026
Reference: t60rxe3jjkktl6skpru1

Senior Director, Exposure & Vulnerability Management

London, England, United Kingdom Permanent Threat Management

Other similar jobs

Senior Microsoft Security Engineer (XDR, IRM, Deception Engineering)

Added 28/09/2026

We are seeking a Senior Security Engineer to design, implement and continuously improve enterprise security capabilities across extended detection and response (XDR), incident response management (IRM) and deception engineering. This role will help strengthen the organisation’s ability to identify, contain and recover from sophisticated cyber threats, while improving the quality, speed and consistency of security operations. You will work closely with security operations, infrastructure, identity, cloud, application and risk teams to translate threat intelligence and business requirements into practical defensive controls. Responsibilities will include developing and tuning detection rules, analytics, automation and response playbooks across endpoint, identity, email, cloud and...

Learn more

Vulnerability, Threat & Exposure Management Analyst

Added 25/09/2026

We are seeking a Vulnerability, Threat & Exposure Management Analyst to strengthen the organisation’s ability to identify, assess and reduce cyber risk across its technology estate. In this role, you will support the continuous management of vulnerabilities, threats and external exposures, helping security and technology teams prioritise remediation based on business impact, exploitability and threat intelligence. You will work with stakeholders across infrastructure, applications, cloud, networks and business operations to promote effective risk reduction and resilient security practices. Key responsibilities will include coordinating vulnerability scanning and exposure assessments, validating findings, analysing trends and producing clear risk-based reports for technical and...

Learn more

Senior Exposure Management Analyst - Cyber & Liability

Added 28/09/2026

We are seeking a Senior Exposure Management Analyst – Cyber & Liability to support the assessment, monitoring and reporting of portfolio exposure across complex cyber, professional indemnity and other liability risks. This role will provide insight into accumulation risk, scenario development and portfolio performance, helping senior stakeholders make informed decisions on underwriting strategy, risk appetite and capital requirements. Key responsibilities will include maintaining and enhancing exposure management processes, analysing portfolio data from internal and external sources, and producing regular reports, dashboards and management information. You will investigate data quality issues, identify trends and concentrations, and contribute to the development of...

Learn more

Threat & Exposure Management Analyst

Added 21/09/2026

We are seeking a Threat & Exposure Management Analyst to help identify, assess and reduce cyber security risks across a complex technology environment. In this role, you will monitor the organisation’s threat landscape, analyse vulnerability and exposure data, and support the prioritisation of remediation activities based on business impact, exploitability and threat intelligence. You will work closely with security operations, infrastructure, application, cloud and risk teams to improve visibility of the attack surface and strengthen overall resilience. Key responsibilities will include maintaining accurate inventories of assets, vulnerabilities, misconfigurations and externally exposed services; reviewing findings from vulnerability scanners, attack surface management...

Learn more

AMBG - Cloud Security & Exposure Management Architect

Added 18/08/2026

We are seeking an experienced Cloud Security & Exposure Management Architect to join our dynamic team. In this role, you will be responsible for designing and implementing robust security architectures for cloud-based environments, ensuring the protection of sensitive data and compliance with industry standards. You will lead the development of security policies, guidelines, and best practices while collaborating with cross-functional teams to assess and mitigate security vulnerabilities. Your expertise in cloud technologies and security frameworks will be critical in identifying potential threats and recommending effective strategies to enhance our security posture. The ideal candidate will have a strong background in...

Learn more

Senior Security Architect - SecOps and Vulnerability Management

Added 07/09/2026

We are seeking a Senior Security Architect to lead the design and continuous improvement of SecOps and vulnerability management capabilities across a complex technology environment. This is a strategic and hands-on role for an experienced security professional who can translate business and technology risks into practical, resilient security solutions. You will define architecture principles, security standards and operating models that strengthen the organisation’s ability to identify, assess, prioritise and respond to cyber threats. Key responsibilities will include developing and maintaining security architecture for security operations, vulnerability management, threat detection, incident response and security monitoring. You will evaluate existing controls, identify...

Learn more

Senior Vulnerability Management Analyst- CIO- BPL

Added 07/09/2026

We are seeking a Senior Vulnerability Management Analyst to lead the identification, assessment, prioritisation, and remediation of security vulnerabilities across a complex technology environment. This role will play a key part in strengthening cyber resilience by turning vulnerability data into clear, actionable insight for technical teams and senior stakeholders. You will work closely with infrastructure, application, cloud, and security teams to ensure vulnerabilities are managed consistently and within agreed risk tolerances. Key responsibilities will include operating and improving vulnerability management processes; configuring and maintaining vulnerability scanning and reporting tools; analysing scan results, threat intelligence, exploitability, and business context; and prioritising...

Learn more

Senior Cyber Security Consultant (Security Operation & Vulnerability Management)

Added 26/08/2026

We are seeking a Senior Cyber Security Consultant (Security Operation & Vulnerability Management) to lead and strengthen security operations across a complex technology environment. This role will provide expert guidance on the identification, assessment and remediation of cyber security risks, while helping to improve the organisation’s overall security maturity. You will work closely with technology, infrastructure, application and risk teams to ensure vulnerabilities are understood, prioritised and addressed in line with business impact. Key responsibilities will include overseeing vulnerability management activities, reviewing scanning results, validating findings and coordinating remediation plans with relevant stakeholders. You will monitor and investigate security events,...

Learn more

Senior InfoSec Analyst Vulnerability Management

Added 25/08/2026

We are seeking a Senior InfoSec Analyst, Vulnerability Management to lead the identification, assessment and remediation of security vulnerabilities across a complex technology environment. This role will be responsible for strengthening vulnerability management practices, improving risk visibility and helping protect critical systems, applications, infrastructure and data. You will work closely with infrastructure, cloud, application development, engineering and compliance teams to ensure vulnerabilities are identified promptly, prioritised appropriately and resolved within agreed risk tolerances. Key responsibilities include managing vulnerability scanning and assessment activities, reviewing results from automated tools and validating findings through manual analysis. You will assess vulnerabilities based on exploitability,...

Learn more

Senior InfoSec Analyst Vulnerability Management

Added 19/08/2026

We are seeking a highly skilled Senior InfoSec Analyst specializing in Vulnerability Management to join our dynamic team. In this role, you will be responsible for identifying, assessing, and mitigating security vulnerabilities across our IT infrastructure. You will lead vulnerability assessments, perform risk analysis, and collaborate with cross-functional teams to ensure compliance with security policies and standards. Your expertise will be critical in developing and implementing remediation strategies, as well as providing guidance on best practices for securing systems and applications. The ideal candidate will have a deep understanding of vulnerability management tools and methodologies, as well as experience in...

Learn more

Vice President, Threat and Vulnerability Management Engineer

Added 12/10/2026

We are seeking a Vice President, Threat and Vulnerability Management Engineer to lead the strategy, architecture, and execution of enterprise-wide cyber risk reduction initiatives. This senior role will combine technical leadership with programme ownership, overseeing the identification, assessment, prioritisation, and remediation of vulnerabilities across infrastructure, applications, cloud environments, endpoints, and emerging technologies. The successful candidate will establish a risk-based vulnerability management framework aligned with business objectives, regulatory expectations, and industry best practice. Responsibilities will include directing vulnerability discovery and assessment activities, improving scanning and validation capabilities, and developing effective remediation processes with technology and business teams. You will define risk...

Learn more

Cyber Security Engineer (Vulnerability Management)

Added 09/10/2026

We are seeking a Cyber Security Engineer specialising in Vulnerability Management to help identify, assess and reduce security risks across a complex technology environment. You will be responsible for operating and improving vulnerability management processes, ensuring that weaknesses in infrastructure, applications, cloud services and endpoints are detected, prioritised and remediated effectively. Working closely with security, infrastructure, application development and operational teams, you will provide practical guidance that strengthens the organisation’s overall security posture. Key responsibilities will include configuring and maintaining vulnerability scanning tools; planning and executing authenticated and unauthenticated scans; validating findings; and analysing results to distinguish genuine risks from...

Learn more

Head of Threat & Vulnerability Management

Added 06/10/2026

We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience. Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading...

Learn more

Vulnerability Management Engineer (12 Month FTC)

Added 28/09/2026

We are seeking a Vulnerability Management Engineer for a 12-month fixed-term contract to support the identification, assessment and remediation of security vulnerabilities across a complex technology environment. This role will be responsible for helping strengthen the organisation’s security posture by ensuring vulnerabilities are accurately identified, prioritised according to risk and addressed within agreed timescales. You will manage and improve vulnerability scanning processes across infrastructure, endpoints, applications and cloud environments, working with security, infrastructure, development and service teams to investigate findings and coordinate remediation activity. Responsibilities will include configuring and maintaining vulnerability management tools, reviewing scan results, validating false positives, producing...

Learn more

Assistant Vice President, Vulnerability Management

Added 24/09/2026

We are seeking an experienced Assistant Vice President, Vulnerability Management to lead and mature an enterprise-wide programme for identifying, assessing, prioritising and remediating security vulnerabilities. This senior leadership role will establish a proactive, risk-based approach to vulnerability management across infrastructure, applications, cloud environments, endpoints and third-party services. You will provide strategic direction while ensuring effective operational delivery, clear governance and measurable improvements in the organisation’s security posture. Key responsibilities include defining the vulnerability management strategy, policies, standards and operating model; overseeing vulnerability scanning, validation, threat-informed prioritisation and remediation tracking; and ensuring timely escalation of critical risks. You will partner closely...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.