Enterprise Cyber Vulnerability Lead

ENGINEERINGUK; Dartford; On-site; GBP 90,000 - 120,000; Full time

Job summary

Laing O'Rourke is seeking a Cyber Security Vulnerability Manager to establish and lead an enterprise-wide vulnerability management programme across IT, cloud, OT and applications. You will prioritise based on business risk, drive remediation and report to senior stakeholders.

The role offers strategic influence, hands-on governance and collaboration with cross-functional teams to strengthen security and resilience across the organisation.

Qualifications

• Proven experience developing and implementing cyber security vulnerability management programmes within a large enterprise environment.
• Practical experience using vulnerability scanning technologies across cloud, hybrid and complex technology environments.
• Knowledge of threat intelligence and risk-based vulnerability prioritisation models.
• Strong analytical and problem-solving skills, with the judgement to recommend practical and proportionate responses to risk.
• The ability to translate technical vulnerabilities, security risks and compliance requirements into clear, business-relevant information.
• Effective stakeholder management and communication skills, with experience working collaboratively across technical and non-technical teams.
• The ability to work independently, remain accountable for outcomes and guide remediation activity through to completion.

Responsibilities

• Design, implement and evolve an enterprise-wide vulnerability management strategy and programme covering discovery, assessment, risk prioritisation, remediation, validation and reporting.
• Conduct and coordinate vulnerability assessments across IT infrastructure, cloud services, applications, software development and manufacturing environments.
• Work collaboratively with technology colleagues to agree proportionate remediations, mitigations and compensating controls.
• Improve the automation of vulnerability management workflows and support the continued development of the organisation's cyber security capability.
• Establish clear measures and reporting that provide visibility of vulnerabilities, remediation progress and business risk.
• Collaborate with Cyber Security Governance, Risk and Compliance colleagues to improve security across the supply chain and third-party providers.
• Develop vulnerability management frameworks, policies and standards that support compliance with ISO 27001, Cyber Essentials Plus, Essential Eight and other relevant requirements.
• Help improve mean time to detect and mean time to remediate while balancing cyber risk with operational availability.
• Build trusted relationships with stakeholders, positioning cyber security as a practical enabler of the business.

Job description

Laing O'Rourke is seeking a Cyber Security Vulnerability Manager to establish and lead an enterprise-wide vulnerability management programme across IT, cloud, OT and applications. You will prioritise based on business risk, drive remediation and report to senior stakeholders.

The role offers strategic influence, hands-on governance and collaboration with cross-functional teams to strengthen security and resilience across the organisation.