Cyber Programme Manager (TVM)

GCS Recruitment; Ireland; Hybrid; EUR 111,000 - 129,000; Full time

Job summary

GCS Recruitment is partnering with a major enterprise to appoint a Cyber Programme Manager (Threat and Vulnerability management) based in Dublin. The role focuses on leading a large-scale TVM function, delivering risk-based remediation and governance across on-premises and cloud estates.

You will own the TVM operating model, drive strategic improvements, report to senior stakeholders, and collaborate with infrastructure, security and engineering teams to strengthen cyber resilience in a

Qualifications

• Significant experience in cyber security, vulnerability management, security operations or security engineering.
• Proven track record leading enterprise-scale TVM programmes.
• Hands-on experience with Qualys for VM, asset discovery, reporting and cloud agent deployment.
• Understanding of CVEs, CVSS, threat intel and risk-based prioritisation.
• Experience in cloud and hybrid environments.
• Knowledge of NIST, CIS Controls, ISO 27001.
• Ability to influence stakeholders at all levels.
• Experience producing executive-level reporting.
• Strong organisational and programme management capabilities.
• Comfortable in fast-paced environments with high-priority security events.

Responsibilities

• Own and develop the enterprise-wide Threat & Vulnerability Management programme, including strategy, governance, processes and performance reporting.
• Oversee the full vulnerability lifecycle, ensuring security exposures are identified, assessed, prioritised and remediated.
• Lead governance forums and remediation reviews, driving accountability across technology and business teams.
• Establish meaningful KPIs, service metrics and executive-level reporting.
• Act as SME for Qualys, ensuring effective utilisation of scanning, asset visibility, reporting and remediation capabilities.
• Improve platform integrations, automation opportunities and reporting processes.
• Partner with infrastructure, cloud, engineering and security teams to improve maturity.
• Coordinate response activities for critical vulnerabilities and emerging threats.
• Support audit, compliance and regulatory activities with governance controls.
• Drive continual improvement initiatives to strengthen cyber resilience.

Skills

Cyber security

Vulnerability management

Security operations

Executive reporting

Tools

Qualys

Job description

Cyber Programme Manager (Threat and Vulnerability management)

Duration: 6 month rolling day rate contract
Type: Day rate contract 600-700 per day
Location: Dublin
Onsite Requirement: Hybrid working model (3 days per week onsite)

Summary of Role

In this role, you will:

• Lead and enhance a large-scale Threat & Vulnerability Management (TVM) function within a complex enterprise environment.
• Drive the organisation's approach to vulnerability identification, risk prioritisation, remediation governance, and continuous security improvement.
• Serve as the senior owner of the vulnerability management operating model, ensuring security risks are managed effectively across infrastructure, cloud, and application estates.
• Act as the principal point of contact between cyber security, technology teams, and senior business stakeholders.
• Champion a risk-based approach to vulnerability remediation while supporting regulatory, audit, and governance requirements.

Job Description

Responsibilities of the role

• Own and develop the enterprise-wide Threat & Vulnerability Management programme, including strategy, governance, processes, and performance reporting.
• Oversee the full vulnerability lifecycle, ensuring security exposures are identified, assessed, prioritised, and remediated appropriately.
• Lead governance forums and remediation reviews, driving accountability across technology and business teams.
• Establish meaningful KPIs, service metrics, and executive-level reporting to measure programme effectiveness and security posture.
• Act as the organisational subject matter expert for Qualys, ensuring effective utilisation of scanning, asset visibility, reporting, and remediation capabilities.
• Improve platform integrations, automation opportunities, and reporting processes to enhance operational efficiency.
• Partner with infrastructure, cloud, engineering, and security teams to improve vulnerability management maturity across the organisation.
• Coordinate response activities for critical vulnerabilities and emerging threats, ensuring timely escalation and risk management.
• Support audit, compliance, and regulatory activities by maintaining appropriate governance controls and evidence.
• Drive continual improvement initiatives that strengthen cyber resilience and reduce enterprise security risk.

Experience and Skills Required

• Significant experience within cyber security, vulnerability management, security operations, or security engineering environments.
• Proven track record leading or managing enterprise-scale Threat & Vulnerability Management programmes.
• Strong hands‑on experience with Qualys, including vulnerability management, asset discovery, reporting, compliance monitoring, and cloud agent deployment.
• Excellent understanding of vulnerability assessment methodologies, CVEs, CVSS scoring, threat intelligence, and risk-based prioritisation approaches.
• Experience working across cloud and hybrid technology environments.
• Strong knowledge of security frameworks and standards such as NIST, CIS Controls, and ISO 27001.
• Ability to influence technical and non-technical stakeholders at all levels of the organisation.
• Demonstrated experience producing executive-level reporting and communicating complex cyber risks clearly.
• Strong organisational, analytical, and programme management capabilities.
• Comfortable operating within fast-paced environments and managing high-priority security events.

What's on Offer

This is an opportunity to take ownership of a highly visible cyber security programme within a major enterprise organisation where information security is a key strategic priority.

You will work alongside experienced security professionals and senior technology leaders, helping shape the future direction of vulnerability management across a large and evolving technology landscape.

The role offers a competitive salary and benefits package, hybrid working, exposure to large-scale security initiatives, and excellent long-term career progression opportunities.