Manager, Security Threat, Vulnerability and Testing; m​/f​/d

Manager, Security Threat, Vulnerability and Testing (m/f/d)

Job Description Manager, Security Threat, Vulnerability and Testing (m/f/d)
IN SHORT

As Senior Manager, Security Threat, Vulnerability & Testing
, you will lead SEFE's enterprise threat intelligence, vulnerability management, security testing, and proactive threat detection capabilities. Working across cyber, operational technology (OT), physical security, and people security domains, you will ensure emerging threats and vulnerabilities are identified early, prioritised appropriately, and addressed in line with business risk, resilience, and regulatory requirements.

• Own and evolve SEFE's enterprise threat intelligence capability, providing insight into emerging threats, threat actors, attack techniques, and risks across cyber, OT, physical, and people security domains.
• Lead the organisation's threat modelling framework, partnering with domain teams to identify attack paths, assess risks, and deliver enterprise-wide visibility of systemic vulnerabilities and emerging threats.
• Drive the end-to-end vulnerability management lifecycle, ensuring effective discovery, risk-based prioritisation, remediation tracking, and governance across applications, infrastructure, cloud, endpoints, and OT environments.
• Deliver and oversee the security testing programme, including penetration testing, scenario-based exercises, control assurance activities, and cross-domain security assessments that strengthen organisational resilience.
• Collaborate closely with Security Operations, GRC, Business Resilience, and other security functions to ensure threat intelligence, security testing outcomes, and vulnerability insights directly inform detection, response, and risk management activities.
• Lead continuous improvement initiatives that strengthen security maturity, enhance assurance capabilities, improve threat visibility, and reduce organisational exposure to both emerging and persistent threats.

• Proven experience leading threat intelligence, vulnerability management, threat hunting, security testing, or security assurance functions within complex enterprise environments.
• Strong understanding of threat actors, attack methodologies, and security risks across cyber, operational technology (OT), physical security and insider threat domains.
• Experience developing and operating enterprise security programmes, including threat modelling, vulnerability management, penetration testing, and proactive threat detection capabilities.
• Ability to translate complex technical findings into clear, risk-based insights that support business decision-making and executive-level understanding.
• Strong stakeholder management and collaboration skills, with experience working across security, technology, operational, and business teams as well as managing external security partners and service providers.
• Analytical, pragmatic, and outcome-focused approach, with the credibility to influence senior stakeholders and drive security improvements through partnership and leadership.

You don't need to meet every requirement. If the role excites you, we'd love to hear from you.

SEFE is an international energy company anchored in Europe, delivering energy solutions that ensure reliable and affordable supply. Our activities span the entire energy value chain – from origination and trading to sales, transport and storage. With decades of trading expertise and a growing LNG portfolio, SEFE is one of Europe’s leading suppliers to industrial customers, providing more than 200 TWh of gas and power each year.

We supply over 50,000 clients, from small businesses to municipalities and multinational organisations. By investing in clean energies, we support our…