101 to 125 of 210 Vulnerability Management Jobs in London

technology decisions at an enterprise level, including cloud strategy and zero trust adoption Oversee penetration testing, DLP, and advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security … threat and regulatory environment shifts Own execution of GRC strategy across the organisation; ensure frameworks are scalable and adaptable Own the Third Party Risk Management (TRPM) programme, including vendor assessments and ongoing oversight IT operations Define and own the IT Operations programme, setting strategy and standards for the function ...

overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security …/OT environments with required expertise in ICS and SCADA systems. Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network ...

executive incident communications, regulator notifications, and post‐incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. … remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve third‐party risk management (carriers, 4PL/3PL partners, SaaS/IaaS providers) and regulatory alignment. Business Partnering & PMO Ensure the Business Partnering function embeds security in product ...

improve the organisation's security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … Responsibilities: \n \n Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. \n Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. \n Review configurations across cloud services, infrastructure, identity, networking, containers, and platform ...

expectations. Embed "secure by design" across technology and product delivery, so security is built in, not bolted on. Be responsible for security governance, risk management, and control effectiveness, driving them day to day. Run and continuously improve our ISMS as the backbone for our security controls and initiatives. Drive … responsible adoption of AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. ...

hands-on technical background in operational cyber security spanning endpoint & EDR, identity & Active Directory, Microsoft 365 & Azure, network/ZTNA, and SIEM/log management - able to act as a senior technical authority within the team. Tools: Azure, Active Directory, CrowdStrike Falcon, Zscaler, Vulnerability Management (Qualys, Tenable … execution of globally-prioritised work to agreed quality, pace and outcomes. Drive London-side delivery of in-flight initiatives through completion. Track and chase vulnerability remediation and patching on London-managed systems, escalating blockers. 3 days on site required in central London Cyber Operations & Incident Response Lead, Cloud, Security ...

enterprise and business‐aligned security initiatives end‐to‐end.* Provide expert security guidance across concurrent IT, engineering, and business projects.* Oversee security assessments including vulnerability management, penetration testing, and third‐party risk.* Translate security findings into prioritized, actionable remediation plans with clear ownership.* Provide security input into solution … security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.).* Ability to translate technical risk into clear, business‐relevant language.* Strong stakeholder management skills with the ability to influence without authority.* Bachelor’s degree in Engineering, Computer Science, or equivalent experience, plus relevant certifications (CISSP, CISM, GIAC ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

technology, data, cyber security, and related operational risks. Reporting to the Head of Technical Risk and Data Protection Officer, the role supports the effective management of technology and data risks by ensuring first line teams identify, assess and mitigate risks in line with Nest’s risk appetite while enabling … organisation to deliver its strategic objectives securely and efficiently.Working across the organisation, the role promotes strong risk management practices, providing expert challenge on technology, data protection, information security, and third-party risk matters. It plays a key role in strengthening governance, embedding a strong data protection and security culture ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

mentorship to engineering teams as an embedded security subject‐matter expert, influencing design decisions and raising overall DevSecOps maturity across the organization. Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded … platforms such as Snyk, Checkmarx, Veracode, or equivalent security testing solutions. Cloud security expertise with experience using cloud security platforms (CSPM, CNAPP), secrets management solutions such as HashiCorp Vault or cloud‐native services, and zero trust or identity‐centric security architectures. Financial services or regulated industry experience with knowledge ...

DevSecOps: Embed security into our CI/CD pipelines without slowing down our high-velocity engineering team. Integrate automated SAST/DAST scanning, dependency management (SCA), and secret detection into our daily workflow. Cloud & Infrastructure Hardening: Work closely with Systems Engineers to secure our Kubernetes clusters and compute environments. … Design strict IAM policies (least privilege for agents) and ensure network isolation so that agent execution environments are impenetrable. Vulnerability Management: Own the lifecycle of vulnerability detection and remediation. Manage bug bounty programs, coordinate third-party pentests, and ensure our open-source dependencies (and the code ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security ...

Identify gaps in monitoring coverage and implement improvements to strengthen security visibility Investigate and respond to DLP alerts and potential data security incidents Support vulnerability management by helping prioritise remediation activities based on risk and exploitability Contribute to SOC maturity through automation, process improvements, playbook development and post ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production‐grade AI‐driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high‐quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large‐scale SaaS systems with production ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

remediation workstreams during active and post-incident engagements. Deliver hands-on technical remediation across Windows, Linux, Active Directory, networking and cloud environments. Drive patching, vulnerability remediation, secure rebuilds and infrastructure hardening. Design secure recovery strategies, including isolated recovery environments, backup validation and phased restoration of critical services. Review network … infrastructure. Cloud platforms such as Azure, AWS and Microsoft 365. Recovery from ransomware, Active Directory compromise or other large-scale cyber incidents. Infrastructure hardening, vulnerability management, secure rebuilds and recovery planning. Managing technical workstreams and communicating effectively with both technical teams and senior stakeholders. Hit the Apply button ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

response expertise during security events. Ensure SOC detection tools and capabilities are up‐to‐date and aligned with evolving threat landscapes. Collaborate with vulnerability management, incident response, and GRC teams to integrate risk‐informed security operations practices. Drive continuous improvement of SOC processes, playbooks, and metrics to enhance ...