Cyber Security Lead – Vulnerability & Exposure Management

An established organisation operating within a highly regulated environment is looking for a Cyber Security Lead to strengthen its approach to identifying, assessing and reducing technical security risk.

You will take ownership of the vulnerability management function, developing it into a proactive, intelligence-led exposure management capability. This will include:

* Establishing an effective CTEM framework and longer-term security roadmap.
* Improving vulnerability scanning across cloud, on-premises and externally accessible technology.
* Prioritising remediation using asset importance, active threats, EPSS, attack paths and business impact.
* Coordinating patching and remediation activity across internal teams and external suppliers.
* Managing risk exceptions, governance and escalation.
* Enhancing automation and integration with IT service management processes.
* Creating clear reporting that demonstrates risk reduction and supports senior decision-making.

We’re looking for someone with:

* Strong enterprise vulnerability or exposure management experience.
* Practical knowledge of Qualys and/or Microsoft Defender for Endpoint.
* A solid understanding of the full vulnerability and remediation process.
* Familiarity with ISO 27001, CIS Controls and Cyber Essentials Plus.
* The ability to influence technical teams, suppliers and senior stakeholders.
* A track record of building or improving cyber security capabilities.

This is a visible, influential position offering genuine ownership and the opportunity to define how cyber exposure is managed across a large and complex technology estate.