Vulnerability & Threat Exposure Manager (Contract, Inside IR35)

Lorien; Greater London; Hybrid; GBP 75,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

London office access

Job summary

Lorien is seeking a Vulnerability & Threat Exposure Manager for a London-based contract role (Inside IR35). The role leads vulnerability management, threat intelligence, and security testing initiatives, with a six-month roadmap and potential extension.

You will own end-to-end processes, partner with managed security providers, and shape governance and reporting for senior stakeholders. Hybrid: London office 1–2 days per week with remote work otherwise.

Qualifications

• Experience managing vulnerability management, threat intelligence, or security testing in complex enterprise environments.
• Strong stakeholder management with technical credibility.
• Experience building or maturing security processes and governance frameworks.
• Familiarity with hybrid delivery models blending internal capability with external partners.
• Pragmatic, outcome-focused approach to influence senior stakeholders.

Responsibilities

• Own end-to-end vulnerability management lifecycle across applications, infrastructure, cloud, and endpoints.
• Lead operational meetings with Security Operations to drive patching and remediation.
• Build governance artefacts, reporting frameworks, and documentation to mature processes.
• Coordinate with managed security partners to expand threat intelligence and testing capabilities.
• Coach and mentor team members within a small, close-knit team.
• Translate technical findings into risk-based insights for senior stakeholders.

Skills

Vulnerability management

Threat intelligence

Security testing

Stakeholder management

Leadership

Governance

Patch management

Job description

Vulnerability & Threat Exposure Manager (Contract, Inside IR35)

Location: London (1–2 days per week in office, remainder remote)

Contract: Initial 6 months, with potential to extend

IR35 Status: Inside IR35

Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month roadmap.

The immediate priority is building out core vulnerability and exposure management: patching workflows, risk-based prioritisation, remediation tracking, and governance reporting. As these foundations mature, focus will shift toward targeted threat intelligence and expanded security testing, working alongside managed security partners to broaden coverage while retaining ownership of core processes internally.

What you'll be doing:

• Owning the end-to-end vulnerability management lifecycle across applications, infrastructure, cloud, and endpoints
• Leading operational meetings and working closely with the Security Operations team to drive patching and remedial action
• Building governance artefacts, reporting frameworks, and documentation to mature vulnerability and exposure processes
• Coordinating with managed security partners to expand threat intelligence and security testing capability
• Coaching and mentoring existing technical resource within a small, close-knit team
• Translating technical findings into clear, risk-based insights for senior stakeholders

What we're looking for:

• Proven experience managing vulnerability management, threat intelligence, or security testing functions within complex enterprise environments
• Strong stakeholder management skills alongside genuine technical credibility
• Experience building or maturing security processes and governance frameworks, ideally within a lean or growing team
• Comfort operating in a hybrid delivery model that blends internal capability with managed service partners
• A pragmatic, outcome-focused approach, with the ability to influence senior stakeholders and drive improvement through partnership