Threat and Vulnerability Management Lead

Threat and Vulnerability Management Lead

Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed‑Term Contract till end of 2026 | Full time | 37.5 hours per week | Competitive salary available, depending on experience.

Responsibilities

• Lead and continuously improve Nuffield Health's enterprise‑wide Threat and Vulnerability Management programme, driving the transition to a mature Exposure Management and CTEM operating model.
• Own the end‑to‑end vulnerability lifecycle, ensuring effective discovery, risk‑based prioritisation, remediation governance, exception management and reporting.
• Develop and manage the VM tooling, patching and automation roadmap, enhancing security visibility, ITSM integration, scanning coverage and operational efficiency.
• Partner with internal technology teams and third‑party providers to drive timely remediation, oversee patch deployment activities and strengthen accountability for risk reduction.
• Deliver meaningful dashboards, KPIs and executive reporting that provide clear insight into cyber exposure, remediation progress and overall security posture.

Qualifications

• Proven expertise leading Threat and Vulnerability Management (TVM) within a complex enterprise environment, with strong technical knowledge across on‑premises, cloud and internet‑facing infrastructure.
• Hands‑on experience with vulnerability management platforms such as Qualys and/or Microsoft Defender for Endpoint, including configuration, scanning, analysis and reporting.
• Strong understanding of risk‑based and exposure‑led vulnerability prioritisation, leveraging threat intelligence, EPSS, attack‑path analysis, asset criticality and business impact alongside CVSS.
• Experience owning the full vulnerability lifecycle, including discovery, triage, remediation governance, exception management, executive reporting and continuous improvement.
• Knowledge of security frameworks and standards including ISO 27001, Cyber Essentials Plus and CIS Controls.
• Excellent stakeholder management, communication and influencing skills, with the ability to translate technical risks into actionable business outcomes.
• Strategic mindset with the ability to build and mature a security capability, drive CTEM adoption, and measure success through meaningful exposure reduction metrics.

Benefits

Helping you feel good.

We provide a comprehensive benefits package that includes fitness and wellbeing rewards such as free gym membership, health assessments, retail discounts, pension options, and more – all designed to support your health, happiness and sense of value.

#J-18808-Ljbffr