Specsavers
Exposure Management Vulnerability Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the Role
Our Threat and Vulnerability Management function sits at the heart of Cyber Operations, focused on protecting our organisation by proactively identifying, assessing and reducing cyber risk. As we evolve from traditional vulnerability management into a true Exposure Management model on our journey toward CTEM, we’re introducing new, more intelligent ways of understanding and addressing risk. This role will be central to that transformation.
As our Exposure Management Vulnerability Lead, you’ll take ownership of the operational delivery of vulnerability management within an exposure-led framework. Rather than relying solely on CVSS scores, you’ll prioritise remediation based on real-world exploitability, business impact and attack-path context. This is a risk-driven position focused on meaningful, measurable exposure reduction.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Manage the full vulnerability lifecycle, shaping operational strategy, defining scope, building processes and continually improving how we work.
- Ensure effective scanning coverage across on-premise, cloud and internet-facing assets, optimise configurations, challenge false positives and guide remediation efforts toward exposure-based outcomes.
- Where tooling exists, help inform attack-path-aware strategies.
- Collaborate with technical teams to accelerate patching, improve configurations and provide clear, trusted, risk-based guidance.
- Develop dashboards, KPIs and executive-ready reporting that highlight risk reduction, support our maturity toward CTEM, and strengthen our Exposure Management model.
- Ensure alignment with security policies, standards and regulatory requirements, while maintaining and enhancing incident response plans, documentation, risk assessments and remediation records.
- Play an active role in training and awareness to promote strong security hygiene across the organisation.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications
- Relevant experience in vulnerability management, risk analysis and incident response.
- Certifications such as CISSP or CISM.
- Degree or equivalent experience in Information Security, Computer Science or a related field.
Why Apply
If you’re excited by transforming vulnerability management into something smarter, faster, and genuinely risk-driven — we want to hear from you.
Apply Today
Apply today and help us shape the future of Exposure Management at Specsavers.
This role closes on 20th July however we may close it early if we receive a high volume of applications. So don’t delay your application, apply now – you’ll be glad you did.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills