Vulnerability & Threat Exposure Manager (Contract, Inside IR35)
Location: London (1–2 days per week in office, remainder remote)
Contract: Initial 6 months, with potential to extend
IR35 Status: Inside IR35
Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month roadmap.
The immediate priority is building out core vulnerability and exposure management: patching workflows, risk-based prioritisation, remediation tracking, and governance reporting. As these foundations mature, focus will shift toward targeted threat intelligence and expanded security testing, working alongside managed security partners to broaden coverage while retaining ownership of core processes internally.
What you'll be doing:
- Owning the end-to-end vulnerability management lifecycle across applications, infrastructure, cloud, and endpoints
- Leading operational meetings and working closely with the Security Operations team to drive patching and remedial action
- Building governance artefacts, reporting frameworks, and documentation to mature vulnerability and exposure processes
- Coordinating with managed security partners to expand threat intelligence and security testing capability
- Coaching and mentoring existing technical resource within a small, close-knit team
- Translating technical findings into clear, risk-based insights for senior stakeholders
What we're looking for:
- Proven experience managing vulnerability management, threat intelligence, or security testing functions within complex enterprise environments
- Strong stakeholder management skills alongside genuine technical credibility
- Experience building or maturing security processes and governance frameworks, ideally within a lean or growing team
- Comfort operating in a hybrid delivery model that blends internal capability with managed service partners
- A pragmatic, outcome-focused approach, with the ability to influence senior stakeholders and drive improvement through partnership
#J-18808-Ljbffr
Vulnerability & Threat Exposure Manager (Contract, Inside IR35) in London employer: Lorien
As a leading employer in the Cyber Security sector, we offer an engaging work culture that prioritises collaboration and innovation. Our Stevenage location provides a dynamic environment where employees can thrive, with opportunities for professional growth and development, including support for further security clearances. Join us to be part of a team dedicated to countering cyber threats while enjoying competitive pay and a commitment to employee well-being.
