Vulnerability Governance Lead: Risk & Supplier Assurance

undisclosed; Preston; On-site; GBP 111,000 - 119,000; Full time

Job summary

undisclosed organisation requires a Vulnerability Management Lead to govern cross-supplier vulnerability management in a fully onsite contract role based in Inverness or Preston. The lead will provide governance, assurance, and strategic oversight across a complex multi-supplier environment, ensuring consistent application of client policy and risk appetite.

The role focuses on governance, assurance, and supplier management rather than technical remediation, scanning, or testing, with

Qualifications

• Significant experience in vulnerability management and cyber governance.
• Experience in security operations governance or GRC roles.
• Ability to manage multi-supplier environments and present risk to senior stakeholders.

Responsibilities

• Own and govern the vulnerability management framework across suppliers.
• Define and maintain classification standards, risk prioritisation, and remediation timelines.
• Provide consolidation of vulnerability risk reporting and executive visibility.
• Assure supplier processes and manage escalations for high-risk vulnerabilities.

Skills

Vulnerability management

Cyber governance

GRC

Job description

undisclosed organisation requires a Vulnerability Management Lead to govern cross-supplier vulnerability management in a fully onsite contract role based in Inverness or Preston. The lead will provide governance, assurance, and strategic oversight across a complex multi-supplier environment, ensuring consistent application of client policy and risk appetite.

The role focuses on governance, assurance, and supplier management rather than technical remediation, scanning, or testing, with