Cybersecurity Vulnerability Manager

EDF Energy; City of Westminster; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading energy provider in the UK seeks a Vulnerability Management Expert to lead a dynamic team focused on protecting critical systems and data. You will own the vulnerability lifecycle, prioritizing risks, and collaborating across technologies. This hybrid role includes a negotiable salary based on experience and the potential for an annual bonus, alongside customizable benefits such as discounted gym memberships and electric vehicle leasing.

Benefits

Annual bonus potential

Customisable benefits

Market-leading pension scheme

Qualifications

• Proven experience delivering vulnerability management in complex, regulated environments.
• Hands-on expertise with vulnerability management tools.
• Strong technical knowledge across IAM, network security, and application security.

Responsibilities

• Own the vulnerability lifecycle from discovery through remediation to reporting.
• Prioritize vulnerabilities by risk and asset criticality.
• Define strategy and lead a team of vulnerability analysts.

Skills

vulnerability management

collaboration

risk management

technical communication

Tools

Tenable One

AWS Inspector

ServiceNow VR

Job description

Responsibilities

• Owning the vulnerability lifecycle from discovery through remediation to executive reporting
• Prioritising vulnerabilities by risk, exposure context, and asset criticality
• Building dashboards and reports for remediation teams and executives
• Driving automation and continuous improvement across processes and tooling
• You'll define and implement strategy, manage risk prioritisation, and lead a team of vulnerability analysts. From automation to executive reporting, you'll collaborate across technology teams and business units to deliver real risk reduction.

Qualifications

We're looking for a vulnerability management expert who thrives on collaboration and operational excellence. To be shortlisted, you need to offer:

• Proven experience delivering vulnerability management in complex, regulated, or enterprise‑scale environments
• Hands‑on expertise with tools such as Tenable One, AWS Inspector, and ServiceNow VR
• Strong technical knowledge across IAM, network security, cloud controls, and application security
• Ability to translate technical risk into business impact and communicate clearly at all levels
• Familiarity with frameworks like NIST CSF, ISO 27001, and compliance requirements such as GDPR and NIS2

About the role

Ready to lead a team that powers secure operations? Want to shape strategies that protect critical systems and data? At EDF, Success is Personal and your career journey is your own. Join us and drive the transition towards an Electric Britain.

Alongside a negotiable salary depending on experience, this is a hybrid role. You'll work from home with occasional travel to our London or Gloucester offices for rare team meet‑ups. Potential for an annual bonus and a market‑leading pension scheme. Customisable benefits such as electric vehicle leasing, discounted gym membership, life assurance, tech vouchers, experience days, and more.

We are committed to building a workforce that reflects gender balance, social mobility, inclusion of minority ethnic backgrounds, LGBTQ+ communities, and those with disabilities. As a Disability Confident employer, we will support applicants requiring adjustments.