Job Search

We are seeking a Vulnerability Management Lead to develop and oversee a proactive, risk-based vulnerability management programme across a complex technology estate. You will provide strategic direction while remaining engaged with the operational detail required to identify, assess, prioritise and remediate vulnerabilities across infrastructure, applications, cloud services, endpoints and third-party environments. Working closely with security, technology, engineering and business stakeholders, you will help reduce exposure to cyber threats and strengthen the organisation’s overall security posture.

Key responsibilities will include defining vulnerability management standards, processes and performance measures; managing vulnerability scanning, assessment and validation activities; and ensuring findings are accurately risk-rated, assigned and tracked through to remediation. You will establish appropriate remediation timeframes, challenge exceptions and overdue actions, and produce clear reporting for technical teams and senior leadership. The role will also involve improving tooling and automation, coordinating penetration testing and exposure assessments, supporting incident response where vulnerabilities are actively exploited, and contributing to security architecture, risk assessments and audit activity. You will lead a team or virtual community of specialists, promote consistent ways of working and help embed secure-by-design principles across delivery and operational teams.

The successful candidate will have substantial experience in vulnerability management, cyber security or a closely related discipline, with a strong understanding of vulnerability assessment methodologies, CVSS, threat intelligence and remediation practices. Experience working with enterprise vulnerability management platforms, cloud environments, application security tools and security information sources is highly desirable. You will be comfortable interpreting technical findings, translating risk for non-technical audiences and influencing stakeholders at all levels. Strong leadership, communication, organisation and problem-solving skills are essential, along with the ability to manage competing priorities in a fast-moving environment. Relevant professional certifications or equivalent practical experience will be welcomed.