Vulnerability and Exposure Manager in Easton

Vulnerability and Exposure Manager

About the Role

We're looking for an experienced Vulnerability & Exposure Manager to lead and mature our vulnerability management capability.

As a leading UK life and pensions mutual insurer with a proud history dating back to 1843, we exist to help people live financially confident lives protecting their income while they work and maximising it when they stop. Today, over one million members and customers trust us to look after their futures, families and finances.

Joining us means becoming part of a team that puts our members, customers and advisers at the heart of everything we do.

Were committed to creating an inclusive culture where colleagues can thrive. We are proud to have built a workplace where our colleagues feel welcomed, respected, supported and valued reflected in our recognition as one of the Financial Times UKs Best Employers in 2025 and 2026.
We celebrate individuality and believe our differences make us stronger, so bring your true self and help shape the future of LV=.

This is a highly visible role responsible for identifying, prioritising and driving the remediation of vulnerabilities across infrastructure, cloud platforms, applications, containers and third-party services.

Working closely with Security Operations, Cloud Engineering, Platform Teams, Development Teams, Architecture and Technology leadership, you'll ensure that cyber risks are understood, prioritised and reduced through effective governance, intelligence-led decision making and strong stakeholder engagement.

This is an excellent opportunity for someone who enjoys combining technical expertise, data-driven analysis and influencing skills to deliver measurable security outcomes.

The role follows a hybrid working pattern, with regular attendance required at our Bournemouth office.

Key Responsibilities
Lead the organisation's end-to-end vulnerability management programme.
Manage vulnerability scanning, analysis, prioritisation, reporting and remediation governance.
Drive risk-based remediation using threat intelligence, exploitability data and business context.
Partner with technology teams to reduce exposure across cloud, infrastructure, applications and endpoints.
Maintain and optimise vulnerability management tooling and asset coverage.
Produce executive-level reporting, dashboards and KPI metrics demonstrating risk reduction and programme effectiveness.
Escalate high-risk or overdue vulnerabilities and influence remediation priorities.
Identify systemic weaknesses and recommend strategic improvements to security architecture and operating practices.
Support continuous improvement through automation, integration and enhanced asset visibility.
About You
You'll be comfortable operating at both a technical and strategic level, translating complex vulnerability data into clear risk-based actions.
Essential Experience
Proven experience in vulnerability management, security operations or security engineering
Hands-on experience with vulnerability scanning platforms and remediation workflows
Strong understanding of CVEs, CVSS, exploitability, patch management and security configuration practices
Experience working with cloud technologies, modern infrastructure and enterprise applications
Ability to analyse large datasets and identify trends, risks and systemic issues
Strong stakeholder management skills with the confidence to challenge constructively and drive action
Experience producing reports and presentations for senior stakeholders

Technical Knowledge
Experience with some of the following:
Vulnerability platforms such as Rapid7, Tenable, Qualys or Microsoft Defender TVM
Azure cloud environments
Endpoint and patch management technologies
SIEM, EDR and threat intelligence platforms
Security tools supporting application and container security
ITSM, ticketing and reporting solutions such as ServiceNow, Jira or Power BI

Desirable Certifications
CompTIA Security+ or CySA+
GIAC certifications (GSEC, GCIH, GSTRT)
Microsoft SC-200 and/or AZ-500
Tenable, Qualys or Rapid7 certifications
ITIL Foundation
Rewards and Benefits

At LV= Savings and Retirement, youll go above and beyond to do the right thing for our customers. Well reward your hard work with an attractive, competitive salary and benefits package, which includes:
30 days' holiday, with the option to buy up to 5 additional days
Competitive pension scheme - LV= Life and Pensions will double-match the amount you pay, up to 14% (subject to National Minimum Wage requirements)
An annual bonus scheme based on personal performance
Single-cover private medical insurance (with the option for you to upgrade to family cover)
Flexible benefits, including a cycle to work scheme, personal accident insurance, critical illness cover and dental insurance
Up to 20% discount on our life products for you and your immediate family
A group life assurance policy with 4 x your basic pay to go to your dependents (youll have the option to increase to 8 x cover)
Group Income Protection (if you become a member of the Pension scheme and reach 5 years of service)
Access to our Employee Assistance Programme (EAP) for support when you need it
A virtual GP service
Shared parental leave
Up to 20% discount on our life products for you and your immediate family.
Please note that we are unable to offer Skilled Worker Visa Sponsorship for this role. Therefore, you must ensure that you are eligible to work in the UK without our sponsorship for your application to be considered.

Were proud of our inclusive culture at LV= and, as an equal-opportunity employer, we continually work to remove unconscious bias from our recruitment process. We value our colleagues for what they bring to our team regardless of any protected status or characteristics they may have. Talk to us about flexible working as part of your application; if its right for you, our members and customers, and our business, then well do everything we can to make it happen.