Vulnerability Governance Lead: Risk & Supplier Oversight

Experis - ManpowerGroup; Preston; Hybrid; GBP 101,000 - 129,000; Full time

Job summary

Experis - ManpowerGroup seeks a Vulnerability Management Lead to govern and assure vulnerability management across suppliers in a hybrid contract role. You will provide governance, assurance, and supplier management, ensuring consistent prioritisation and reporting without performing technical remediation.

Based in the UK, the role supports client governance boards and security leadership, focusing on risk-based decision making and evidence management in a complex SIAM environment.

Qualifications

• Significant experience in Vulnerability Management, Cyber Governance, Security Operations Governance, or GRC roles.
• Strong understanding of the vulnerability management lifecycle and risk-based remediation approaches.
• Experience operating in complex multi-supplier environments and presenting risk information to senior stakeholders.

Responsibilities

• Govern vulnerability management framework across suppliers.
• Define and maintain vulnerability classification standards and risk-based prioritisation models.
• Manage remediation timelines and exception management processes.
• Ensure alignment to client security policies and control requirements.
• Provide consolidated vulnerability risk reporting across suppliers and escalate high-risk issues.
• Define vulnerability management evidence requirements and support audits and assurance activities.
• Drive continuous improvement and maturity across supplier processes.

Skills

Vulnerability management

Cyber governance

Security operations governance

GRC

Stakeholder management

Senior stakeholder communication

Multi-supplier environment

Risk-based remediation

Security governance frameworks

Job description

Experis - ManpowerGroup seeks a Vulnerability Management Lead to govern and assure vulnerability management across suppliers in a hybrid contract role. You will provide governance, assurance, and supplier management, ensuring consistent prioritisation and reporting without performing technical remediation.

Based in the UK, the role supports client governance boards and security leadership, focusing on risk-based decision making and evidence management in a complex SIAM environment.