This role will be responsible for driving vulnerability identification, prioritisation, governance, reporting, and remediation activities across both cloud and on-premise environments.,
Responsibilities
- Lead and mature enterprise-wide vulnerability management programmes.
- Establish and maintain vulnerability management governance frameworks, standards, and operating procedures.
- Drive risk-based vulnerability prioritisation and remediation activities across multiple technology teams.
- Develop and maintain vulnerability management metrics, KPIs, dashboards, and executive reporting packs.
- Work with infrastructure, cloud, application, and security teams to ensure timely remediation of identified vulnerabilities.
- Provide expert guidance on vulnerability risk, exploitation trends, and emerging cyber threats.
- Support security leadership with risk assessments and strategic decision-making.
- Oversee vulnerability management tooling, reporting, and remediation tracking across hybrid technology estates.
Qualifications
- Extensive experience leading enterprise-scale vulnerability management programmes.
- Strong understanding of vulnerability assessment, prioritisation, remediation, and risk management methodologies.
- Proven experience working with vulnerability management tooling such as Qualys, Tenable, Rapid7, Nessus, Defender Vulnerability Management, or similar.
- Experience managing vulnerabilities across cloud and on-premise environments.
- Demonstrable track record of driving remediation activity through both technical and non-technical stakeholders.
- Strong governance, reporting, KPI development, and executive-level communication experience.
- Good understanding of cyber threat intelligence, vulnerability exploitation trends, and risk-based prioritisation approaches.
#J-18808-Ljbffr