Bonhill Partners
Threat and Vulnerability Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Client: Global Investment Bank
Role: Deputy Head of Threat & Vulnerability Management
Location: London, Bank
3-4 days in office.
Details:
- Initial 6 month contract, with guaranteed conversion to perm within that period.
- Perm Salary: 100k-125k
- Initial Contract Rate: TBC
Skills & Experience
This is a senior cybersecurity leadership position supporting the development and delivery of the organisation's Threat and Vulnerability Management capability. The successful candidate will play a key role in identifying cyber threats and weaknesses, driving remediation activity, and improving the overall security posture of a complex enterprise environment.
Key Requirements:
- Extensive experience across Vulnerability Management, Threat Intelligence, Cyber Risk, or related security functions.
- Ideally 10+ years working within cybersecurity, preferably in financial services or another heavily regulated organisation.
- Proven experience managing vulnerability assessment programmes and driving remediation across large and complex technology estates.
- Strong understanding of how vulnerabilities should be assessed, prioritised, and remediated based on business and cyber risk.
- Experience developing vulnerability remediation processes, including patching standards, governance, and remediation timelines.
- Knowledge of security hardening standards and configuration management frameworks, including CIS Benchmarks.
- Strong understanding of the cyber threat landscape, attacker behaviour, and adversary Tactics, Techniques and Procedures (TTPs).
- Hands-on or leadership experience within Threat Intelligence and proactive Threat Hunting environments.
- Ability to use intelligence, vulnerability data, and security telemetry to identify areas of increased cyber exposure.
- Experience working with tools such as Qualys, ServiceNow SecOps VR, or similar vulnerability management platforms.
- Strong experience engaging senior stakeholders and communicating cyber risk in a clear and commercially relevant manner.
- Experience leading teams or coordinating multiple security functions across a large organisation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Desirable:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Experience designing or improving enterprise Threat Intelligence capabilities.
- Exposure to phishing simulation programmes and security awareness initiatives.
- Experience establishing Security Champion or Security Advocate networks.
- Experience partnering closely with SOC, Incident Response, Detection Engineering, and Security Architecture teams.
- Previous responsibility for executive-level cyber reporting and strategic risk updates.
- Relevant industry certifications such as CISSP, CISM, GIAC, or equivalent.
- Experience working within a global, complex, or matrixed organisation.
Key areas of expertise should include:
- Vulnerability Assessment & Management
- Threat Intelligence
- Threat Hunting
- Cyber Exposure & Risk Management
- Vulnerability Prioritisation
- Patch & R
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location