10 of 10 Vulnerability Management Jobs in the City of London

Month Contract Hybrid (2/3 days a week in Canary Wharf, London) We're looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well … established financial services organisation. This isn't a traditional vulnerability management role focused purely on remediation governance. Instead, you'll take ownership of the existing Microsoft Defender tooling, develop the vulnerability management strategy around it, enhance reporting for executive stakeholders, and help build a mature, data ...

resilient, and scalable platforms across Azure, AWS, or both. Design and improve CI/CD pipelines, infrastructure as code, automated testing, release controls, environment management, and deployment strategies. Work with software engineering and data science teams to productionize AI solutions and ensure services are ready to operate reliably … such as Docker and Kubernetes. Strong software engineering and automation skills using Python, Bash, PowerShell, Go, or a similar language. Knowledge of observability, incident management, cloud security, identity and access management, secrets management, network security, vulnerability management, and software supply‐chain risk. Demonstrable experience using ...

Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR/XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands‐On Security Engineering Implement and optimise controls across … portfolio of insurance clients Deliver security reviews, maturity assessments, and improvement plans Act as a trusted advisor on risk, controls, and security architecture Vulnerability & Risk Management Own scanning, assessment, and remediation across platforms Partner with engineering teams to prioritise and reduce risk exposure Drive continuous improvement in security ...

technology decisions at an enterprise level, including cloud strategy and zero trust adoption Oversee penetration testing, DLP, and advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security … threat and regulatory environment shifts Own execution of GRC strategy across the organisation; ensure frameworks are scalable and adaptable Own the Third Party Risk Management (TRPM) programme, including vendor assessments and ongoing oversight IT operations Define and own the IT Operations programme, setting strategy and standards for the function ...

overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security …/OT environments with required expertise in ICS and SCADA systems. Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and alerting capabilities Conducting security reviews of new products, services and technology initiatives Building meaningful security metrics and reporting that support informed decision-making … security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with ...

looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible enough to influence engineering … Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. You're looking for a large enterprise people-management role. You haven't owned Product Security within a software engineering environment. ...