Threat & Vulnerability Management Programme Lead - Hybrid

GCS Recruitment; Ireland; Hybrid; EUR 110,700 - 129,150; Full time

Job summary

GCS Recruitment seeks a Cyber Programme Manager to lead a large-scale Threat & Vulnerability Management function within a complex enterprise. You will own the vulnerability lifecycle and drive risk-based remediation governance across infrastructure, cloud, and applications.

You will partner with cyber security, technology and senior business leaders to establish KPIs, executive reporting, and continuous security improvement while aligning with regulatory and audit requirements.

Qualifications

• Significant experience in cyber security, vulnerability management or related areas.
• Experience leading enterprise-scale TVM programmes.

Responsibilities

• Own and develop the enterprise-wide Threat & Vulnerability Management programme, including strategy, governance, processes, and reporting.
• Oversee the full vulnerability lifecycle from discovery to remediation.
• Lead governance forums and remediation reviews across technology and business teams.
• Establish KPIs and executive reporting to measure security posture.
• Act as SME for Qualys, including asset visibility and remediation capabilities.
• Coordinate response to critical vulnerabilities and emerging threats.
• Support audit and regulatory activities with governance controls.

Skills

cyber security

vulnerability management

security operations

security engineering

enterprise-scale programmes

Qualys

cloud/hybrid

risk-based prioritisation

stakeholder management

programme management

executive reporting

Tools

Qualys

Job description

GCS Recruitment seeks a Cyber Programme Manager to lead a large-scale Threat & Vulnerability Management function within a complex enterprise. You will own the vulnerability lifecycle and drive risk-based remediation governance across infrastructure, cloud, and applications.

You will partner with cyber security, technology and senior business leaders to establish KPIs, executive reporting, and continuous security improvement while aligning with regulatory and audit requirements.