Vulnerability Management Lead

La Fosse; Liverpool; On-site; GBP 70,000 - 90,000; Full time

Job summary

La Fosse is seeking a leader to own the Vulnerability Management function across IT and OT, driving a mature, intelligence-led approach to identifying, prioritising and reducing cyber risk across critical business services.

You will establish asset management, build CMDB, lead end-to-end vulnerability management with remediation teams, and deliver KPI reporting to senior stakeholders. This role operates in a regulated Critical National Infrastructure environment.

Responsibilities

• Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services.
• Establish a robust asset management capability by identifying and cataloguing technology assets, building and maintaining the CMDB, and improving visibility across both enterprise and OT environments to support effective vulnerability management.
• Lead the end to end vulnerability management process, partnering with remediation teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders.
• Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation's defensive posture and support proactive threat hunting.
• Assess the effectiveness of existing vulnerability management tooling and processes, recommending and implementing improvements that enhance automation, reporting, coverage and overall programme maturity.
• Operate as the technical lead for the function, confidently engaging with stakeholders across the business, influencing remediation activities, and driving continuous improvement with minimal oversight in a highly regulated Critical National Infrastructure environment.

Job description

• Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services.
• Establish a robust asset management capability by identifying and cataloguing technology assets, building and maintaining the CMDB, and improving visibility across both enterprise and OT environments to support effective vulnerability management.
• Lead the end to end vulnerability management process, partnering with remediation teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders.
• Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation's defensive posture and support proactive threat hunting.
• Assess the effectiveness of existing vulnerability management tooling and processes, recommending and implementing improvements that enhance automation, reporting, coverage and overall programme maturity.
• Operate as the technical lead for the function, confidently engaging with stakeholders across the business, influencing remediation activities, and driving continuous improvement with minimal oversight in a highly regulated Critical National Infrastructure environment.