This role will be responsible for driving vulnerability identification, prioritisation, governance, reporting, and remediation activities across both cloud and on-premise environments.,
Responsibilities
- Lead and mature enterprise-wide vulnerability management programmes.
- Establish and maintain vulnerability management governance frameworks, standards, and operating procedures.
- Drive risk-based vulnerability prioritisation and remediation activities across multiple technology teams.
- Develop and maintain vulnerability management metrics, KPIs, dashboards, and executive reporting packs.
- Work with infrastructure, cloud, application, and security teams to ensure timely remediation of identified vulnerabilities.
- Provide expert guidance on vulnerability risk, exploitation trends, and emerging cyber threats.
- Support security leadership with risk assessments and strategic decision-making.
- Oversee vulnerability management tooling, reporting, and remediation tracking across hybrid technology estates.
Qualifications
- Extensive experience leading enterprise-scale vulnerability management programmes.
- Strong understanding of vulnerability assessment, prioritisation, remediation, and risk management methodologies.
- Proven experience working with vulnerability management tooling such as Qualys, Tenable, Rapid7, Nessus, Defender Vulnerability Management, or similar.
- Experience managing vulnerabilities across cloud and on-premise environments.
- Demonstrable track record of driving remediation activity through both technical and non-technical stakeholders.
- Strong governance, reporting, KPI development, and executive-level communication experience.
- Good understanding of cyber threat intelligence, vulnerability exploitation trends, and risk-based prioritisation approaches.
#J-18808-Ljbffr
Vulnerability Management Lead -.*SC CLEARANCE* in City of Westminster employer: Korn Ferry
Korn Ferry Project Solutions is an exceptional employer, offering a dynamic work environment in the heart of London where innovation meets collaboration. With a strong focus on employee growth and development, we provide opportunities to lead impactful projects in cyber security while enjoying competitive compensation and the flexibility of outside IR35 contracts. Our inclusive culture fosters teamwork and encourages professional advancement, making it an ideal place for those looking to make a meaningful contribution in the insurance sector.
