Job Description

Job Description:

Key Responsibilities

• Lead and manage the end-to-end vulnerability management and response lifecycle, from identification and assessment through prioritisation, remediation, validation, and closure.
• Establish and maintain a risk-based vulnerability remediation approach across the organisation.
• Prioritise vulnerabilities based on severity, exploitability, asset criticality, business impact, threat intelligence, exposure, and active exploitation status.
• Lead and coordinate vulnerability remediation activities across Infrastructure, Cloud, Application, Network, Endpoint, DevOps, and Technology teams.
• Ensure Critical and High-risk vulnerabilities are remediated within agreed SLAs and risk tolerances.
• Drive accelerated response and remediation activities for actively exploited vulnerabilities, zero-day vulnerabilities, and emerging threats.
• Monitor remediation progress, identify overdue or at-risk vulnerabilities, and drive appropriate escalation and resolution.
• Establish effective vulnerability governance, controls, processes, and operating procedures across the organisation.
• Work with Technology Risk and Cyber Security teams to ensure vulnerabilities are appropriately risk assessed, accepted, mitigated, or remediated.
• Challenge remediation plans where timelines, compensating controls, or risk treatment are insufficient.
• Develop and maintain vulnerability management metrics, KPIs, KRIs, dashboards, and management information.
• Produce clear and actionable reporting for senior management and executive stakeholders, highlighting key vulnerabilities, remediation performance, risk exposure, trends, and areas requiring escalation.
• Support vulnerability-related risk assessments, audits, regulatory reviews, and compliance activities.
• Ensure vulnerability management practices remain aligned with relevant security standards, regulatory expectations, internal policies, and industry best practices.
• Continuously improve vulnerability management processes, automation, reporting, and remediation effectiveness.

Required Experience & Qualifications

Experience

• Minimum 9 years of professional experience in Cyber Security, Vulnerability Management, Cyber Security Operations, Cyber Defence, Technology Risk, or a closely related discipline.
• Significant hands-on experience in Vulnerability Management and Cyber Security Operations within large or complex enterprise environments.
• Proven experience leading enterprise-wide vulnerability remediation programmes involving multiple technology and business teams.
• Strong experience managing security vulnerabilities from identification through remediation and validation.

Job Tags

Similar Jobs