Vulnerability & Threat Exposure Manager (Contract, Inside IR35)
Location: London (1-2 days per week in office, remainder remote)
Contract: Initial 6 months, with potential to extend
IR35 Status: Inside IR35
Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month road map.

The immediate priority is building out core vulnerability and exposure management: patching workflows, risk-based prioritisation, remediation tracking, and governance reporting. As these foundations develop, focus will shift toward targeted threat intelligence and expanded security testing, working alongside managed security partners to broaden coverage while retaining ownership of core processes internally.

What you'll be doing:

• Owning the end-to-end vulnerability management life-cycle across applications, infrastructure, cloud, and endpoints
• Leading operational meetings and working closely with the Security Operations team to drive patching and remedial action
• Building governance artefacts, reporting frameworks, and documentation to develop vulnerability and exposure processes
• Coordinating with managed security partners to expand threat intelligence and security testing capability
• Coaching and mentoring existing technical resource within a small, close-knit team
• Translating technical findings into clear, risk-based insights for senior stakeholders

What we're looking for:

• Proven experience managing vulnerability management, threat intelligence, or security testing functions within complex enterprise environments
• Strong stakeholder management skills alongside genuine technical credibility
• Experience building or maturing security processes and governance frameworks, ideally within a lean or growing team
• Comfort operating in a hybrid delivery model that blends internal capability with managed service partners
• A pragmatic, outcome-focused approach, with the ability to influence senior stakeholders and drive improvement through partnership

This is an urgent requirement with a two-stage interview process (an introductory conversation followed by a technical session), so early applications are strongly encouraged.
To apply or find out more, contact

Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.