Hybrid Lead, Enterprise Vulnerability Management & Governance

Adecco; Preston; Hybrid; GBP 75,000 - 85,000; Full time

Job summary

Adecco is looking for a Vulnerability Management Service Lead to own and govern an end-to-end vulnerability management framework within a highly regulated enterprise. You will drive risk reduction, governance, and supplier accountability across a large-scale security operation.

You will work with senior stakeholders to ensure vulnerabilities are identified, prioritized, remediated, and reported effectively, with a focus on continuous improvement and audit readiness.

Qualifications

• Significant experience in vulnerability management, cyber security governance, GRC, or security operations governance roles.
• Strong understanding of end-to-end vulnerability management lifecycle.
• Experience implementing and governing risk-based remediation programmes.
• Proven ability to work across complex enterprise environments and multiple delivery partners.
• Strong stakeholder management with ability to influence technical and non-technical audiences.
• Experience producing executive-level reporting and communicating cyber risk to senior leadership.
• Knowledge of security frameworks such as NIST CSF, ISO 27001, NCSC guidance, Secure by Design.

Responsibilities

• Lead the enterprise vulnerability management service and governance framework.
• Drive remediation activities through internal teams and third-party suppliers.
• Establish and maintain vulnerability reporting, metrics, KPIs and executive dashboards.
• Prioritize vulnerabilities using risk-based methodologies (CVSS, EPSS, KEV, business criticality).
• Manage exception processes, remediation timelines, and security risk governance.
• Provide assurance and challenge across a multi-supplier service environment.
• Present vulnerability trends, risk exposure, and remediation performance to senior stakeholders.
• Ensure audit readiness and evidence management.
• Identify opportunities for process improvement, automation, and service maturity.

Skills

Vulnerability management

Cyber security governance

GRC

Security operations governance

Risk-based remediation

Executive reporting

Stakeholder management

Tools

Tenable

Qualys

Brinqa

Job description

Adecco is looking for a Vulnerability Management Service Lead to own and govern an end-to-end vulnerability management framework within a highly regulated enterprise. You will drive risk reduction, governance, and supplier accountability across a large-scale security operation.

You will work with senior stakeholders to ensure vulnerabilities are identified, prioritized, remediated, and reported effectively, with a focus on continuous improvement and audit readiness.