Exposure Management Vulnerability Lead

About the role

As the Exposure Management Vulnerability Lead, you will drive the transformation of our vulnerability program into an exposure‑focused, risk‑driven operation. Working within the Cyber Operations team, you will ensure that remediation priorities are based on real‑world exploitability, business impact and attack‑path context.

Key responsibilities

• Own the full vulnerability lifecycle across on‑premise, cloud and internet‑facing assets.
• Define and continuously improve operational processes, scope, and scanning coverage.
• Prioritise remediation using exposure‑based criteria rather than CVSS scores alone.
• Collaborate with technical teams to accelerate patching, optimise configurations and reduce false positives.
• Develop dashboards, KPIs and executive‑level reports that demonstrate risk reduction.
• Maintain alignment with security policies, standards and regulatory requirements.
• Support incident response plans, risk assessments and remediation documentation.
• Lead training and awareness initiatives to promote strong security hygiene.

Required profile

• Proven experience in vulnerability management, risk analysis and incident response.
• Relevant certifications such as CISSP or CISM.
• Degree in Information Security, Computer Science or equivalent practical experience.
• Strong understanding of exposure‑management concepts and CTEM methodology.

Required skills

• CISSP
• CISM
• Vulnerability management
• Risk analysis
• Incident response