Senior Exposure & Vulnerability Risk Lead – Hybrid

Bupa; Salford; Hybrid; GBP 58,000 - 70,000; Full time

Benefits offered by this job

Role-specific bonus 10%

Job summary

Bupa is seeking a Senior Exposure Management Analyst to strengthen our Continuous Threat Exposure Management capability. You will identify, assess and drive remediation of vulnerabilities across the technology estate, translating technical findings into risk-based actions.

Hybrid role with 2 days in the office; 37.5 hour week, based in the UK. Salary from £64,000 with a role-specific 10% bonus and benefits, and opportunities to shape security outcomes across cloud and on‑premises environments.

Qualifications

• Security+ certification required or strongly preferred.
• Experience with vulnerability and exposure management tooling.
• Cloud security and exposure management experience.
• Able to interpret CVEs, CVSS, threat intelligence and business impact to support risk-based prioritisation.

Responsibilities

• Operate and improve vulnerability and exposure management processes.
• Consolidate security data into a single view and support reporting workflows.
• Assess vulnerabilities in the context of business risk to prioritise actions.
• Drive remediation with infrastructure, cloud, network and business teams.
• Provide guidance and mentoring to analysts.
• Prepare updates and dashboards for risk forums and leadership.
• Plan and manage scanning and remediation tracking to meet service levels.

Skills

Security+ certification

Cloud security

Vulnerability management tooling

Stakeholder engagement

Mentoring

CVSS interpretation

Job description

Bupa is seeking a Senior Exposure Management Analyst to strengthen our Continuous Threat Exposure Management capability. You will identify, assess and drive remediation of vulnerabilities across the technology estate, translating technical findings into risk-based actions.

Hybrid role with 2 days in the office; 37.5 hour week, based in the UK. Salary from £64,000 with a role-specific 10% bonus and benefits, and opportunities to shape security outcomes across cloud and on‑premises environments.