SVP, Cyber Exposure & Vulnerability Management
Job Description
[Up to c. $250k Base Salary + Discretionary Bonus | Hybrid Working - 4 Days In Office]
Role Overview
We're representing a major international investment organisation seeking a senior cybersecurity leader to advance its enterprise exposure management capabilities. Positioned within the wider technology security function, this appointment will take ownership of an established vulnerability management practice, with responsibility for reshaping its strategy, technical effectiveness and operational performance. The priority is to move beyond conventional vulnerability detection and reporting towards a more predictive, intelligence-led approach to managing cyber exposure. This involves strengthening visibility across infrastructure, cloud and applications, connecting security findings to exploitable attack paths, and improving how quickly underlying risks are addressed across the organisation.
The successful individual will lead an existing team, define a multi-year transformation roadmap and work closely with senior technology stakeholders to deliver measurable improvements. The mandate requires substantial technical credibility alongside executive-level influence, with particular consideration for how AI-enabled threats are changing the security landscape...
Role Snapshot
- Bring approximately 12+ years of cybersecurity experience, including 6+ years in senior leadership, with proven ownership of substantial enterprise vulnerability or exposure management programmes
- Lead the evolution of an existing security capability, establishing a 3-5 year strategy that improves threat visibility, remediation effectiveness, technical integration and operational resilience
- Maintain deep practical expertise in vulnerability assessment across networks, infrastructure, web services, application code and cloud environments, including the limitations of scanning technologies
- Expand continuous attack-surface visibility across traditional infrastructure, cloud services and identity systems, connecting disparate security findings to identify meaningful exposure patterns
- Apply exploitability intelligence, adversarial techniques, attack-path analysis and business context to determine which vulnerabilities represent the greatest operational risk
- Improve remediation processes through automation, stronger data correlation, root-cause analysis and measurable performance indicators, reducing both resolution times and recurring weaknesses
- Direct and develop an established security team while influencing engineering leaders, infrastructure owners and other accountable stakeholders to deliver sustainable improvements
- Shape the organisation's exposure validation approach, incorporating penetration testing, breach-and-attack simulation and an effective balance of internal and specialist external capabilities
- Translate technical vulnerabilities into actionable business risk for senior leadership, working closely with cybersecurity, risk and audit functions while anticipating evolving threats, including AI-enabled attacks
- (Preferred) Experience with platforms such as Tenable, Qualys, Wiz and CrowdStrike, alongside previous exposure to complex, regulated financial-services environments
...
Apply for this role
All fields marked with * are required.