Senior Cyber Threat & Vulnerability Manager

A leading Financial Services client is looking for a Senior Cyber Threat & Vulnerability Manager to lead its cyber threat, vulnerability, penetration testing and exposure management capabilities.

This is a senior, hands‑on role within the CISO function, focused on identifying and responding to emerging threats, reducing cyber exposure and driving effective remediation across the business.

The role offers a base salary of circa £130,000 plus excellent benefits, with very flexible working.

• Lead the end‑to‑end Threat, Vulnerability and Exposure Management function.
• Drive the prioritisation and remediation of high and critical vulnerabilities, including zero‑day and actively exploited threats.
• Own penetration testing programmes, including scoping, delivery, findings and remediation.
• Develop and improve vulnerability governance, SLAs, processes and reporting.
• Work closely with Technology, Cloud, Security and external partners to improve cyber resilience and reduce exposure.
• Provide clear reporting and challenge to senior stakeholders on cyber risk, remediation and emerging threats.
• Identify opportunities to use AI, automation and data enrichment to improve threat detection, vulnerability prioritisation and response.

• Strong experience across Cyber Threat, Vulnerability and Exposure Management within a complex enterprise environment.
• Strong understanding of threat intelligence, risk‑based vulnerability prioritisation and remediation.
• Experience managing high and critical vulnerabilities, zero‑day and emerging threats through to remediation.
• Experience owning penetration testing programmes and working with external security partners.
• Experience working across cloud, infrastructure, applications, endpoints and third‑party services.
• B2C or consumer‑facing experience, ideally within Financial Services, Insurance or another high‑volume environment.
• Good understanding of the cyber security risks and challenges associated with AI adoption, including emerging threats, attack vectors and vulnerabilities.
• Experience using AI, automation or data enrichment to improve cyber security outcomes.
• Strong stakeholder management skills, with the ability to influence senior Technology and Security teams.