- Company Name
- Glow Beauty on Demand
- Job Title
- Cyber Threat Intelligence & Vulnerability Management Lead
- Job Description
-
Job Title: Cyber Threat Intelligence & Vulnerability Management Lead
Role Summary
Lead the development and execution of the organization’s Cyber Threat Intelligence (CTI) and Vulnerability Management (VM) capabilities. Drive the definition and implementation of technical controls, threat hunting, and incident response processes. Provide strategic and technical guidance to senior management and asset owners, ensuring alignment with security policies, standards, and regulatory requirements.
Expectations
* Deliver a comprehensive CTI and VM program that meets group-wide security objectives.
* Maintain continuous, high‑quality threat intelligence and vulnerability reporting.
* Influence and enforce technical controls and risk treatment plans across the enterprise.
* Demonstrate strong stakeholder communication and the ability to manage multiple initiatives concurrently.
Key Responsibilities
* Lead the creation and ongoing refinement of CTI frameworks, SIEM/SOC processes, and industrial control matrices.
* Conduct regular threat intelligence and vulnerability review meetings with stakeholders.
* Develop and enforce technical controls matrices, architectural controls, and asset‑owner accountability.
* Provide technical oversight for consistent delivery of CTI, VM, and related security documentation.
* Recommend and implement CTI toolkits, threat hunting, signature development, and TIP processes.
* Represent security interests in technical review, Senior Leadership Team meetings, audits, Technical Design Authority, and Change Advisory Boards.
* Ensure alignment of controls and risk treatment with ISO27001, ISO27005, NIST, IEC 62443, SABSA, and other applicable frameworks.
Required Skills
* In‑depth knowledge of CTI, threat hunting, and vulnerability management lifecycle.
* Expertise in security frameworks: ISO27001, ISO27005, ITIL, NIST CSF, IEC 62443, SABSA, and the cyber kill chain.
* Strong analytical, risk assessment, and technical documentation abilities.
* Excellent verbal and written communication; effective stakeholder management.
* Proven experience leading cross‑functional security programs in IT/OT environments.
Required Education & Certifications
* Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
* Professional security certifications such as CISSP, CISM, CRISC, CEH, or GIAC.
* ISO27001 Lead Implementer or equivalent security management certification is highly desirable.
Bridge of allan, United kingdom
On site
Senior
30-10-2025