ZRG
Interim Vulnerability Management Modernisation Lead - VC-Backed Digital Bank
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Interim Vulnerability Management Modernisation Lead - VC-Backed Digital Bank
UK-based | Predominantly remote with occasional London travel | Contract | Up to £450 per day
We are working with an established, fast-growing, VC-backed digital bank undergoing a significant modernisation of its technology and security infrastructure.
The bank is seeking an experienced Vulnerability Management Modernisation Lead to establish and take end-to-end ownership of a permanently embedded vulnerability management capability.
This is a senior, hands-on contract role. You will design the target operating model, establish the policies and processes, implement the required tooling and personally drive delivery across internal teams and third-party technology partners.
You must be comfortable operating at every level, from detailed technical analysis and implementation to presenting risk, progress and investment requirements to executive- and board-level stakeholders.
The opportunity
You will become the single accountable owner of vulnerability management, building a sustainable business-as-usual capability that addresses existing exposure while preventing new technology debt from accumulating.
Your responsibilities will include:
- Establishing and owning the bank’s end-to-end vulnerability management framework, operating model and remediation processes.
- Improving vulnerability scanning, patching and validation across the technology estate, including non-Windows assets and network devices.
- Rationalising the application estate, identifying opportunities to remove unnecessary or unsupported technology and reduce future exposure.
- Selecting and implementing appropriate patch-management tooling and establishing risk-based policies across different asset classes.
- Defining clear responsibilities, service levels and delivery expectations for the bank’s managed service provider and holding external partners accountable.
- Producing meaningful vulnerability and remediation reporting for senior executives and the board, while ensuring improvements are embedded into business-as-usual operations.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
The person
We are looking for a seasoned vulnerability management specialist who combines strong technical judgement with programme leadership, supplier management and executive-level communication skills.
You should bring:
- Demonstrable experience establishing, modernising or running an enterprise vulnerability management function.
- Deep practical knowledge of vulnerability scanning platforms and the differences between authenticated and unauthenticated scanning.
- Strong understanding of credentials, privileged access management integration and scan configuration.
- Hands-on experience selecting and implementing enterprise patch-management tooling across first-party and third-party software.
- The technical judgement to distinguish genuine exposure from scanner noise and apply an appropriate risk-based approach.
- Experience rationalising and decommissioning technology estates as part of a remediation strategy.
- A strong record of holding managed service providers and other technology suppliers accountable for delivery.
- The credibility to explain vulnerabilities, remediation priorities and risk trade-offs to executive- and board-level stakeholders.
- A hands-on approach, with the willingness to remain closely involved in technical delivery rather than operating solely as a programme manager.
- Experience leading change and embedding a sustainable operating capability.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Previous experience within a regulated financial services environment is required. Experience within a challenger bank, neobank, payments business, FX platform or innovative fintech would be particularly valuable.
Exposure to core banking remediation cycles, penetration testing, secure configuration reviews and formal technology-debt programmes would also be beneficial.
Applicants should ideally be based in the UK and be able to travel to London occasionally.
Day rate: Up to £450 per day - Outside IR35
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location