Hybrid Vulnerability & Threat Exposure Manager

Lorien; Greater London; Hybrid; GBP 75,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

London office access

Job summary

Lorien is seeking a Vulnerability & Threat Exposure Manager for a London-based contract role (Inside IR35). The role leads vulnerability management, threat intelligence, and security testing initiatives, with a six-month roadmap and potential extension.

You will own end-to-end processes, partner with managed security providers, and shape governance and reporting for senior stakeholders. Hybrid: London office 1–2 days per week with remote work otherwise.

Qualifications

• Experience managing vulnerability management, threat intelligence, or security testing in complex enterprise environments.
• Strong stakeholder management with technical credibility.
• Experience building or maturing security processes and governance frameworks.
• Familiarity with hybrid delivery models blending internal capability with external partners.
• Pragmatic, outcome-focused approach to influence senior stakeholders.

Responsibilities

• Own end-to-end vulnerability management lifecycle across applications, infrastructure, cloud, and endpoints.
• Lead operational meetings with Security Operations to drive patching and remediation.
• Build governance artefacts, reporting frameworks, and documentation to mature processes.
• Coordinate with managed security partners to expand threat intelligence and testing capabilities.
• Coach and mentor team members within a small, close-knit team.
• Translate technical findings into risk-based insights for senior stakeholders.

Skills

Vulnerability management

Threat intelligence

Security testing

Stakeholder management

Leadership

Governance

Patch management

Job description

Lorien is seeking a Vulnerability & Threat Exposure Manager for a London-based contract role (Inside IR35). The role leads vulnerability management, threat intelligence, and security testing initiatives, with a six-month roadmap and potential extension.

You will own end-to-end processes, partner with managed security providers, and shape governance and reporting for senior stakeholders. Hybrid: London office 1–2 days per week with remote work otherwise.