Head of Security Testing and Vulnerability Management

Head of Security Testing and Vulnerability Management

Join OSCAR ASSOCIATES (UK) LIMITED as the Head of Security Testing and Vulnerability Management. This role oversees the organisation’s global approach to security testing and vulnerability management, ensuring vulnerabilities across infrastructure, applications, and cloud platforms are identified, prioritised, and remediated in a complex, multi‑regional environment.

• Define and lead the global security testing and vulnerability management strategy aligned to enterprise risk objectives.
• Establish governance, metrics, and reporting for security testing and remediation activities.
• Oversee penetration testing, red teaming, and application security testing programmes.
• Manage vulnerability scanning, prioritisation, and remediation processes across on‑prem, cloud, and application environments.
• Partner with IT, engineering, and business teams to ensure timely patching and mitigation of critical risks.
• Integrate vulnerability management tools and automation into CI/CD and operational workflows.
• Monitor emerging threats, attack techniques, and testing methodologies to continuously improve security effectiveness.
• Align vulnerability management practices with recognised standards and frameworks (e.g. ISO 27001, NIST, CIS).
• Provide clear, executive‑level reporting on security risk exposure and remediation progress.
• Build, lead, and develop a high‑performing security testing and vulnerability management team.
• Promote a culture of accountability, collaboration, and continuous improvement across security and technology functions.

• Demonstrated experience leading enterprise‑scale security testing and vulnerability management functions.
• Strong technical knowledge of penetration testing, vulnerability assessment, and remediation practices.
• Hands‑on experience with vulnerability management and testing tools (e.g. Qualys, Microsoft Defender Vulnerability Management).
• Experience integrating vulnerability management with broader risk and governance frameworks.
• Proven leadership, stakeholder engagement, and communication skills at senior levels.
• Ability to operate effectively across multiple regions and diverse technology environments.
• Relevant security certifications (e.g. CISSP, OSCP, or equivalent).
• Experience with cloud security, particularly Azure, and Dev Sec Ops  practices.
• Background working in large, complex enterprise organisations.

Location: Leeds (Hybrid 2/3 split)

Salary: £75,000 - £85,000

Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.

To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.