Programme Manager - Vulnerability Management

Our major client is seeing an experienced SC Cleared Programme Manager with proven experience as a dedicated Vulnerabiltiy management leader. You will be acting as the hands‑on operational lead for the Vulnerability Management Improvement Programme, taking direct ownership of the team's day‑to‑day deliverables and strategic realignment. This role is Inside IR35, with hybrid working and occasional travel required to multiple sites.

You must also hold current SC Clearance.

• Team Stabilisation:
  Step into a high-pressure environment to stabilise the vulnerability team, providing clear direction, structure, and support to analysts and subject matter experts.
• Process Optimisation:
  Conduct a rapid assessment of current vulnerability management processes to identify inefficiencies, bottlenecks, and inefficient practices.
• Hands-on Execution:
  Operate as a "doer" as well as a leader. You will not just be theorising; you will be actively writing management presentations, drafting new operational processes, and defining clear operating models.
• Stakeholder Management:
  Act as the primary buffer and interface between the vulnerability team and the wider business, managing expectations and translating technical vulnerability data into actionable business intelligence.
• Programme Delivery:
  Oversee the successful execution of distinct vulnerability work streams, working alongside dedicated Project Managers to implement strategic, long‑term solutions.
• Proven VM Leadership:
  Extensive experience as a dedicated Vulnerability Management Leader, ideally with a track record of turning around, maturing, or rescuing underperforming security functions.
• Strategic & Tactical Balance:
  Ability to operate at a senior management level while remaining highly hands‑on with process writing, presentation building, and data analysis.
• Resilience:
  Comfort operating in a high‑pressure, fast‑paced environment that is currently undergoing significant transformation and stabilisation.
• Deep Technical Context:
  Strong understanding of the end‑to‑end vulnerability life cycle, reporting tools (eg, Tenable), and how to effectively guide IT resolver groups on remediation and patching prioritisation.
• Change Management: A proactive driver of change who can challenge the status quo, overcome apathy, and build a culture of accountability and resilience within the team.
• Korn Ferry unleashes potential in people, teams, and organisations. We work with our clients to design optimal organisation structures, roles, and responsibilities. We help them hire the right people and advise them on how to reward and motivate their workforce while developing professionals as they navigate and advance their careers. To learn more, please visit our website.