Exposure Management Vulnerability Lead

This role can be worked remotely across England, Wales or Scotland with travel to partner sites when required

Join Specsavers at a pivotal point in our cyber security journey, where we're evolving from traditional vulnerability management towards a mature Exposure Management capability and our longer-term Continuous Threat Exposure Management (CTEM) vision. This is a fantastic opportunity for an experienced Exposure Management Vulnerability Lead to shape the future direction of the function, helping us better understand, prioritise and reduce cyber risk across a complex global environment.

This is far more than a scanning and reporting role. You'll lead the vulnerability management function, taking ownership of strategy, operational delivery and continuous improvement, while helping to drive a more risk-based approach to remediation. You'll oversee vulnerability management and attack surface management activities, influence how exposure is measured and managed and work closely with technical and business teams to ensure security efforts are focused on issues that present genuine risk to the organisation.

We're looking for a cyber security professional who has led a vulnerability management programme and can bring excellent leadership, stakeholder engagement and influencing skills. You'll have a solid understanding of Exposure Management principles and be familiar with CTEM concepts, even if you haven't worked within a fully mature CTEM programme. You'll be comfortable translating technical vulnerability data into meaningful business risk, driving improvement initiatives, developing reporting and metrics and acting as a trusted advisor across the organisation.

If you're excited by the opportunity to build and shape a modern vulnerability capability, influence the direction of Exposure Management and play a key role in reducing cyber risk across a global business, we'd love to hear from you. Join a team that is embracing innovation, challenging traditional approaches to security and creating a smarter, more proactive way to protect what matters most.