About this role
Salary: £70,000 - 75,000 per year
Requirements: Significant experience in Vulnerability Management, Cyber Security Governance, GRC, or Security Operations Governance rolesStrong understanding of the end-to-end vulnerability management lifecycleExperience implementing and governing risk-based remediation programmesProven ability to work across complex enterprise environments and multiple delivery partnersStrong stakeholder management skills with the ability to influence technical and non-technical audiencesExperience producing executive-level reporting and communicating cyber risk to senior leadershipKnowledge of recognised security frameworks and standards such as NIST Cyber Security Framework, ISO 27001, NCSC guidance, and Secure by Design principlesHands-on experience with vulnerability management platforms such as Tenable, Qualys, or BrinqaExperience working within defence, government, public sector, or other highly regulated environmentsRelevant cyber security certificationsEligible for SC Clearance requiredSole British national Responsibilities: Lead the enterprise vulnerability management service and governance frameworkDrive vulnerability remediation activities through internal teams and third-party suppliersEstablish and maintain vulnerability reporting, metrics, KPIs, and executive dashboardsPrioritise vulnerabilities using risk-based methodologies including CVSS, EPSS, Known Exploited Vulnerabilities (KEV), and business criticalityManage exception processes, remediation timelines, and security risk governanceProvide assurance, oversight, and challenge across a multi-supplier service environmentPresent vulnerability trends, risk exposure, and remediation performance to senior stakeholdersEnsure audit readiness, evidence management, and compliance alignmentIdentify opportunities for process improvement, automation, and service maturity enhancement Technologies: Security More:
We are seeking an experienced Vulnerability Management Service Lead to take ownership of a mature vulnerability management capability within a highly regulated enterprise environment. This is a hybrid position with onsite attendance in either Preston or Inverness approximately two days per week, with flexibility depending on business requirements. We offer the opportunity to lead a critical cyber security function within a large-scale enterprise environment, exposure to complex and high-profile technology estates, ongoing professional development and training opportunities, access to experienced cyber security professionals across governance, operations, engineering, architecture, and compliance disciplines, flexible and hybrid working arrangements, a comprehensive benefits package, and long-term career progression within a growing cyber security practice.
last updated 37 week of 2026