Cyber Programme Manager (TVM)

GCS Recruitment; Ireland; On-site; EUR 110,700 - 129,150; Full time

Job summary

GCS Recruitment seeks a Cyber Programme Manager to lead a large-scale Threat & Vulnerability Management function within a complex enterprise. You will own the vulnerability lifecycle and drive risk-based remediation governance across infrastructure, cloud, and applications.

You will partner with cyber security, technology and senior business leaders to establish KPIs, executive reporting, and continuous security improvement while aligning with regulatory and audit requirements.

Qualifications

• Significant experience in cyber security, vulnerability management or related areas.
• Experience leading enterprise-scale TVM programmes.

Responsibilities

• Own and develop the enterprise-wide Threat & Vulnerability Management programme, including strategy, governance, processes, and reporting.
• Oversee the full vulnerability lifecycle from discovery to remediation.
• Lead governance forums and remediation reviews across technology and business teams.
• Establish KPIs and executive reporting to measure security posture.
• Act as SME for Qualys, including asset visibility and remediation capabilities.
• Coordinate response to critical vulnerabilities and emerging threats.
• Support audit and regulatory activities with governance controls.

Skills

cyber security

vulnerability management

security operations

security engineering

enterprise-scale programmes

Qualys

cloud/hybrid

risk-based prioritisation

stakeholder management

programme management

executive reporting

Tools

Qualys

Job description

Cyber Programme Manager (Threat and Vulnerability management)

Duration: 6 month rolling day rate contract
Type: Day rate contract 600-700 per day
Location: Dublin
Onsite Requirement: Hybrid working model (3 days per week onsite)

Summary of Role

• Lead and enhance a large-scale Threat & Vulnerability Management (TVM) function within a complex enterprise environment.
• Drive the organisation's approach to vulnerability identification, risk prioritisation, remediation governance, and continuous security improvement.
• Serve as the senior owner of the vulnerability management operating model, ensuring security risks are managed effectively across infrastructure, cloud, and application estates.
• Act as the principal point of contact between cyber security, technology teams, and senior business stakeholders.
• Champion a risk-based approach to vulnerability remediation while supporting regulatory, audit, and governance requirements.

Responsibilities of the role

• Own and develop the enterprise-wide Threat & Vulnerability Management programme, including strategy, governance, processes, and performance reporting.
• Oversee the full vulnerability lifecycle, ensuring security exposures are identified, assessed, prioritised, and remediated appropriately.
• Lead governance forums and remediation reviews, driving accountability across technology and business teams.
• Establish meaningful KPIs, service metrics, and executive‑level reporting to measure programme effectiveness and security posture.
• Act as the organisational subject matter expert for Qualys, ensuring effective utilisation of scanning, asset visibility, reporting, and remediation capabilities.
• Improve platform integrations, automation opportunities, and reporting processes to enhance operational efficiency.
• Partner with infrastructure, cloud, engineering, and security teams to improve vulnerability management maturity across the organisation.
• Coordinate response activities for critical vulnerabilities and emerging threats, ensuring timely escalation and risk management.
• Support audit, compliance, and regulatory activities by maintaining appropriate governance controls and evidence.
• Drive continual improvement initiatives that strengthen cyber resilience and reduce enterprise security risk.

Experience and Skills Required

• Significant experience within cyber security, vulnerability management, security operations, or security engineering environments.
• Proven track record leading or managing enterprise‑scale Threat & Vulnerability Management programmes.
• Strong hands‑on experience with Qualys, including vulnerability management, asset discovery, reporting, compliance monitoring, and cloud agent deployment.
• Excellent understanding of vulnerability assessment methodologies, CVEs, CVSS scoring, threat intelligence, and risk‑based prioritisation approaches.
• Experience working across cloud and hybrid technology environments.
• Strong knowledge of security frameworks and standards such as NIST, CIS Controls, and ISO 27001.
• Ability to influence technical and non‑technical stakeholders at all levels of the organisation.
• Demonstrated experience producing executive‑level reporting and communicating complex cyber risks clearly.
• Strong organisational, analytical, and programme management capabilities.
• Comfortable operating within fast‑paced environments and managing high‑priority security events.

What's on Offer

This is an opportunity to take ownership of a highly visible cyber security programme within a major enterprise organisation where information security is a key strategic priority.

You will work alongside experienced security professionals and senior technology leaders, helping shape the future direction of vulnerability management across a large and evolving technology landscape.

The role offers a competitive salary and benefits package, hybrid working, exposure to large‑scale security initiatives, and excellent long‑term career progression opportunities.