Cyber Threat Intelligence & Vulnerability Management Lead

Cyber Threat\\nIntelligence & Vulnerability Management Lead\\n Flexible location \\n Hybrid working\\n Permanent, full time\\n\\n Closing date: Monday 3rd November 2025\\n\\n Who we are\\n\\nWe’re not just talking about making a difference, we’re making it happen.\\nWe generate dispatchable, renewable power and create stable energy in an\\nuncertain world. Building on our proud heritage, we have ambition to become the\\nglobal leader in sustainable biomass and carbon removals.\\n\\n You’ll be joining our teams of practical doers, future thinkers and business\\nchampions. We’re enabling a zero carbon, lower cost energy future for all, and\\nworking hard to decarbonise the planet for generations to come.\\n\\n About the role\\n\\nThe primary purpose of this role is to manage and influence all aspects of\\nCyber Threat Intelligence and Vulnerability Management, but particularly in the\\ndevelopment of the threat landscape to Drax.

You’ll also assist in the\\ndevelopment of Technical Controls in accordance with policy, standards and\\nregulatory requirements.\\n\\n You’ll help to develop and support senior management with the technical\\ncontrols and cyber threat intelligence skills within the group-wide security\\nteam and through the rollout of tools, technical controls, policies and\\nprocedures, and coaching and mentoring. The role will also have responsibility\\nfor working with asset owners to ensure that they understand their\\nresponsibilities regarding risk and technical security controls.\\n\\n You’ll deliver against the business strategy, the technical roadmap and\\nobjectives set out in the Security strategy – covering group wide security\\nrequirements.\\n\\n Additional responsibilities include:\\n\\n – Supporting the definition of technical controls matrices, Security Operations\\nCentre (SOC) processes, industrial control matrices and architectural controls,\\nproviding oversight to other SMEs in support of their BAU activities and\\nmaintaining accurate documentation and record keeping.\\n – Ensuring controls and risk treatment plans align with our policies and\\nstandards.\\n – Leading threat intelligence and vulnerability management review meetings with\\nkey stakeholders and provision of security representation at business unit\\ntechnical review and Senior Leadership Team (SLT) meetings as required.\\nEffectively communicating all technical controls and mitigations.\\n – Continuing to develop and improve the Group Cyber Threat Intelligence\\nframework technical controls, industrial controls and architectural controls\\nincluding the effective management of the required documentation across the\\nGroup.\\n – Recommending and implementing an appropriate toolkit for Cyber Threat\\nIntelligence.\\n – Technical control reporting.\\n – Researching threats, Indicators of Compromise (IoCs) and threat actor Tactics,Techniques and Procedures (TTPs) to support Threat Hunting, Signature\\nDevelopment and Threat Intelligence Platform (TIP) processes.\\n – Providing strong technical oversight to deliver consistency and quality in\\ntechnical work across the Group.\\n – Participating in Audits, Technical Design Authority and Change Advisory\\nBoards as required.\\n\\n Who we’re looking for\\n\\nThis role requires the ability to interpret Cyber Threat Intelligence and\\ntechnical controls and communicate effectively to all levels of the\\norganisation.\\n\\n Ideally, you’ll have a good experience working within IT/OT in an operational\\nor corporate environment with a good knowledge of control frameworks such as\\nISO27001, ITIL (Information Technology Infrastructure Library), NIST, SABSA and\\nIEC 62443 and cyber kill chain.\\n\\n You’ll have a good knowledge of Risk Management Methodologies such as ISO27005\\nand IRAM2/security frameworks NIST/NIS CAF/IEC/SoGp Cyber Kill chain with\\nstrong IT technical skills to support this knowledge.\\n\\n You’ll also demonstrate strong communication (verbal and written) and\\nstakeholder management skills, with the ability to take the initiative and\\nhandle multiple projects simultaneously.\\n\\nRewards and benefits\\n\\nAs you help us to shape the future, we’ve shaped our rewards and benefits to help you thrive and support your lifestyle:\\n\\n- Competitive salary\\n- Discretionary group performance-based bonus\\n- 25 days annual leave (plus Bank Holidays)\\n- Single cover private medical insurance\\n- Pension scheme\\n\\nWe’re committed to making a tangible impact on the climate challenge we all face. Drax is where your individual purpose can work alongside your career drive.

We work as part of a team that shares a passion for doing what’s right for the future. With Drax you can shape your career and a future for generations to come.\\n\\nTogether, we make it happen.\\n\\nAt Drax, we’re committed to fostering an environment where everyone feels valued and respected, regardless of their role. To make this a reality, we actively work to better represent the communities we operate in, foster inclusion, and establish fair processes.

Through these actions, we build the trust needed for all colleagues at Drax to contribute their perspectives and talents, no matter their background. Find out more about our approach here.\\n\\nHow to apply\\n\\nThink this role’s for you? Click the ‘Apply now’ button to begin your Drax journey.\\n\\nIf you want to find out more about Drax, check out our LinkedIn page to see our latest news