Cyber Security Vulnerability Lead

Vallum Associates; City Of London; Remote; GBP 70,000 - 90,000; Full time

Job summary

A leading UK energy company is seeking a Cyber Security Vulnerability Management Lead for a 6-month contract. This largely remote role involves driving the end-to-end vulnerability management programme, defining policies, and collaborating with teams to enhance security. Candidates must hold valid UK SC clearance and have a strong track record in vulnerability management and experience with relevant security tools.

Qualifications

• Valid UK SC clearance required.
• Solid experience in vulnerability management in large organizations.
• Hands-on experience with specific security tools.

Responsibilities

• Lead the vulnerability management programme across various environments.
• Define policies and reporting to demonstrate risk reduction.
• Build dashboards to communicate exposure trends.

Skills

Vulnerability management

Security posture improvement

Communication skills

Risk management

Tools

Tenable One

AWS Inspector

ServiceNow

Job description

Overview

We’re looking for an experienced Cyber Security Vulnerability Management Lead to join a leading UK energy company on a 6-month contract. You’ll be responsible for driving the end-to-end vulnerability management programme across a complex, enterprise-scale environment, helping to reduce risk and strengthen security posture.

You must hold valid SC clearance to be considered for this role.

This is a largely remote role, with ad-hoc onsite collaboration in London or Gloucester (once or twice a month).

Responsibilities

• Lead and mature the vulnerability management programme across cloud, on-prem, and enterprise environments.
• Define policies, SLAs, and reporting to track remediation progress and demonstrate risk reduction.
• Build dashboards/metrics (e.g. Power BI, ServiceNow) to communicate exposure trends and priorities.
• Collaborate with infrastructure, application, and cloud teams to drive timely remediation.
• Provide subject matter expertise during incidents, audits, and compliance reviews (ISO 27001, NIST, GDPR, CE+).
• Identify opportunities for automation to streamline processes.

Requirements

• To have valid UK SC clearance
• Strong track record delivering vulnerability management in large or regulated organisations.
• Hands-on experience with tools such as Tenable One, AWS Inspector, and ServiceNow.
• Solid understanding of security domains (IAM, network, cloud, application security).
• Excellent communication skills — able to influence at both technical and exec level.
• Calm under pressure, with proven ability to triage and prioritise effectively.

If this sounds like an opportunity you are interested in, apply now for an immediate review!