Threat and Vulnerability Management Lead
Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time
Competitive Salary available, depending on experience
37.5 hours per week
At Nuffield Health, our mission to build a healthier nation is powered by passionate people who make a difference every day. We are seeking an experienced Threat and Vulnerability Management Lead to join our growing Cyber Security team and take ownership of our enterprise-wide Threat and Vulnerability Management function.
This is an exciting opportunity to shape and mature our vulnerability management capability, driving the evolution from traditional vulnerability management to a risk-based Exposure Management and CTEM approach. You will define the operating model, influence strategic direction, enhance tooling and processes, and work closely with technology and business stakeholders to reduce cyber risk across a complex healthcare environment.
As our Threat and Vulnerability Management Lead you'll:
Lead and continuously improve Nuffield Health's enterprise-wide Threat and Vulnerability Management programme, driving the transition to a mature Exposure Management and CTEM operating model.
Own the end-to-end vulnerability lifecycle, ensuring effective discovery, risk-based prioritisation, remediation governance, exception management and reporting.
Develop and manage the VM tooling, patching and automation roadmap, enhancing security visibility, ITSM integration, scanning coverage and operational efficiency.
Partner with internal technology teams and third-party providers to drive timely remediation, oversee patch deployment activities and strengthen accountability for risk reduction.
Deliver meaningful dashboards, KPIs and executive reporting that provide clear insight into cyber exposure, remediation progress and overall security posture.
To succeed as our Threat and Vulnerability Management Lead you'll bring:
Proven expertise leading Threat and Vulnerability Management (TVM) within a complex enterprise environment, with strong technical knowledge across on-premises, cloud and internet-facing infrastructure.
Hands-on experience with vulnerability management platforms such as Qualys and/or Microsoft Defender for Endpoint, including configuration, scanning, analysis and reporting.
Strong understanding of risk-based and exposure-led vulnerability prioritisation, leveraging threat intelligence, EPSS, attack-path analysis, asset criticality and business impact alongside CVSS.
Experience owning the full vulnerability lifecycle, including discovery, triage, remediation governance, exception management, executive reporting and continuous improvement.
Knowledge of security frameworks and standards including ISO 27001, Cyber Essentials Plus and CIS Controls.
Excellent stakeholder management, communication and influencing skills, with the ability to translate technical risks into actionable business outcomes.
Strategic mindset with the ability to build and mature a security capability, drive CTEM adoption, and measure success through meaningful exposure reduction metrics.
Helping you feel good.
We want you to love coming to work, feeling healthy, happy and valued. That's why we've developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.
At Nuffield Health, we take care of what's important to you.
If you like what you see, why not start your application now? We consider applications as we receive them and reserve the right to close adverts early (for example, where we have received an unprecedented high volume of applications). So, it's a good idea to apply right away to ensure you're considered for this role.
Apply today… It starts with you.
Threat and Vulnerability Management Lead • City of London, London, England
Starling is the UK's first and leading digital bank on a mission to fix banking! Our vision is fast technology, fair service, and honest values.All at the tap of a phone, all the time.We are about ... Show more
Starling is the UK's first and leading digital bank on a mission to fix banking! Our vision is fast technology, fair service, and honest values.All at the tap of a phone, all the time.We are about ... Show more
This role, within our Cybersecurity Assessments Delivery Office, will be responsible for day to day service delivery of security assessments across JPMC.You will be supporting the execution of tech... Show more
PJT Partners in Greater London is seeking an experienced Cybersecurity Professional to handle vulnerability management and incident response.The ideal candidate will have 7-10+ years in information... Show more
JPMorganChase is seeking a Fraud Strategy Director to lead enterprise-wide fraud-stategy initiatives, spanning prevention, detection, investigation and recovery.You will partner with product, opera... Show more
Threat and Vulnerability Management Lead.Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time.Competitive Salary available, depe... Show more
Senior Delivery Consultant | Talent Acquisition Specialist.Vulnerability SME Lead – Must have Active SC Clearance.One of our prestigious clients is looking for a Vulnerability Lead/Manager/SME for ... Show more
A global humanitarian organization is seeking a Threat Detection and Response Lead based in Rome, Italy.The successful candidate will oversee cybersecurity operations, manage a team, and respond to... Show more
VERNE is seeking a Development Health & Safety Lead to define safety standards across capital projects in London.You will develop construction EHS policies, conduct risk analyses, and drive a world... Show more
Oracle is seeking an in-region EHS leader to drive the development and deployment of a globally harmonized EHS management system across EMEA, including data center construction and live operations.... Show more
Digital Realty in London is seeking a Senior Cybersecurity Analyst specializing in Threat & Vulnerability Management with a primary focus on applications and cloud environments.You will own vulnera... Show more
NTT Global Data Centers is seeking a Senior Security Platform Engineer to join the GDC-OIS team.The role requires expert-level skills in threat hunting, SIEM/SOAR, and incident response across IT/O... Show more
The Government Digital Service (GDS) is the digital centre of government.We are responsible for setting, leading and delivering the vision for a modern digital government.Our priorities are to driv... Show more
Capital Markets Gateway LLC (CMG) is seeking a Senior Security Engineer to own security risk management, threat modeling, and governance initiatives.You will report to the CISO and drive cross‑prog... Show more
Threat and Vulnerability Management Lead.Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time.Competitive Salary available, depe... Show more
Starling is the UK's first and leading digital bank on a mission to fix banking! Our vision is fast technology, fair service, and honest values.All at the tap of a phone, all the time.We are about ... Show more
Tradeweb Markets is hiring a Cyber Security Engineer in London to lead threat intelligence and drive vulnerability management across our enterprise IT landscape.The role supports SOC, infrastructur... Show more
We are a future‑focused company in the energy sector committed to responsible energy solutions.Our core beliefs include playing big, embracing emotional agility, driving performance, and infinite t... Show more
Palo Alto Networks is seeking a client-facing Principal Consultant in the UK to lead and deliver reactive incident response engagements for diverse customers.You will manage engagements from scopin... Show more
PA Consulting seeks a Managing Consultant in Digital Trust and Cyber Security to lead and grow its consulting practice focused on financial services.The ideal candidate will possess extensive exper... Show more
