Enterprise Cyber Risk & Vulnerability Manager

Laing O'Rourke; Dartford; Remote; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Disability Confident scheme

Reasonable adjustments during hiring

Job summary

Laing O'Rourke is seeking an experienced Cyber Security Vulnerability Manager to establish and lead an enterprise-wide vulnerability management programme across IT, cloud, OT and applications. You will identify, prioritise and remediate vulnerabilities and report to senior stakeholders to enable informed cyber risk decisions.

This role offers the chance to shape security across a leading engineering and construction business with a focus on robust governance, ISO 27001 alignment, and

Qualifications

• Proven experience developing and implementing vulnerability management programmes in a large enterprise.
• Experience using vulnerability scanning technologies across IT, cloud, and OT environments.
• Knowledge of threat intelligence and risk-based prioritisation models.
• Strong analytical and problem-solving skills with the ability to translate vulnerabilities into business actions.

Responsibilities

• Design and lead an enterprise-wide vulnerability management programme across IT, cloud, OT and applications.
• Prioritise vulnerabilities by business risk and ensure remediation within SLAs.
• Coordinate and conduct vulnerability assessments across infrastructure, cloud services, apps, and manufacturing environments.
• Collaborate with technology teams to agree proportionate remediations and controls.
• Improve automation of vulnerability workflows and reporting to senior stakeholders.
• Develop and maintain vulnerability management frameworks, policies and standards.
• Support compliance with ISO 27001, Cyber Essentials Plus and other requirements.

Skills

Vulnerability management

Threat-based prioritisation

Vulnerability scanning

Stakeholder communication

ISO 27001 knowledge

Cyber risk

Tools

Qualys

Nessus

Job description

Laing O'Rourke is seeking an experienced Cyber Security Vulnerability Manager to establish and lead an enterprise-wide vulnerability management programme across IT, cloud, OT and applications. You will identify, prioritise and remediate vulnerabilities and report to senior stakeholders to enable informed cyber risk decisions.

This role offers the chance to shape security across a leading engineering and construction business with a focus on robust governance, ISO 27001 alignment, and