Vulnerability Management Lead -.*SC CLEARANCE*

Korn Ferry Group; City of Westminster; In loco; GBP 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Korn Ferry is seeking an experienced vulnerability management lead to drive enterprise-scale programs across cloud and on-premise environments.

You will establish governance, prioritise remediation by risk, and deliver executive-level reporting. Collaboration with infrastructure, cloud, and security teams is essential to ensure timely remediation and ongoing risk mitigation.

Competenze

• Extensive experience leading enterprise-scale vulnerability management programmes.
• Strong understanding of vulnerability assessment, prioritisation, remediation, and risk management methodologies.
• Proven experience with vulnerability management tooling (Qualys, Tenable, Rapid7, Nessus, Defender VM, or similar).
• Experience across cloud and on-premise environments.
• Track record of driving remediation with technical and non-technical stakeholders.
• Governance, reporting, KPI development, and executive communication experience.
• Understanding of cyber threat intelligence and risk-based prioritisation approaches.

Mansioni

• Lead and mature enterprise-wide vulnerability management programmes.
• Establish and maintain governance frameworks, standards, and procedures.
• Drive risk-based prioritisation and remediation across multiple teams.
• Develop and maintain vulnerability management metrics, KPIs, dashboards, and executive packs.
• Coordinate with infrastructure, cloud, app, and security teams for timely remediation.
• Provide guidance on vulnerability risk, trends, and threats.
• Support leadership with risk assessments and strategic decisions.
• Oversee tooling, reporting, and remediation tracking across hybrid estates.

Conoscenze

Enterprise vulnerability management

Governance and reporting

Risk-based prioritisation

Executive communication

Stakeholder collaboration

Strumenti

Qualys

Tenable

Rapid7

Nessus

Defender Vulnerability Management

Descrizione del lavoro

This role will be responsible for driving vulnerability identification, prioritisation, governance, reporting, and remediation activities across both cloud and on-premise environments.,

Responsibilities

• Lead and mature enterprise-wide vulnerability management programmes.
• Establish and maintain vulnerability management governance frameworks, standards, and operating procedures.
• Drive risk-based vulnerability prioritisation and remediation activities across multiple technology teams.
• Develop and maintain vulnerability management metrics, KPIs, dashboards, and executive reporting packs.
• Work with infrastructure, cloud, application, and security teams to ensure timely remediation of identified vulnerabilities.
• Provide expert guidance on vulnerability risk, exploitation trends, and emerging cyber threats.
• Support security leadership with risk assessments and strategic decision-making.
• Oversee vulnerability management tooling, reporting, and remediation tracking across hybrid technology estates.

Qualifications

• Extensive experience leading enterprise-scale vulnerability management programmes.
• Strong understanding of vulnerability assessment, prioritisation, remediation, and risk management methodologies.
• Proven experience working with vulnerability management tooling such as Qualys, Tenable, Rapid7, Nessus, Defender Vulnerability Management, or similar.
• Experience managing vulnerabilities across cloud and on-premise environments.
• Demonstrable track record of driving remediation activity through both technical and non-technical stakeholders.
• Strong governance, reporting, KPI development, and executive-level communication experience.
• Good understanding of cyber threat intelligence, vulnerability exploitation trends, and risk-based prioritisation approaches.