Full job description6 Month Contract
Hybrid (2/3 days a week in Canary Wharf, London)


We’re looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well-established financial services organisation.


This isn’t a traditional vulnerability management role focused purely on remediation governance. Instead, you’ll take ownership of the existing Microsoft Defender tooling, develop the vulnerability management strategy around it, enhance reporting for executive stakeholders, and help build a mature, data-driven vulnerability management function.


What you’ll be doing
*Own and develop the organisation’s Microsoft Defender Vulnerability Management capability.
*Review and enhance the current vulnerability management strategy, framework and operating model.
*Build meaningful reporting and dashboards for senior leadership and Executive Risk Committees.
*Analyse vulnerability data to identify trends, risks and opportunities for improvement.
*Drive improvements to processes, governance and reporting using Microsoft Defender insights.
*Work closely with security, infrastructure and engineering teams to improve the overall security posture.
*Define metrics and KPIs to measure vulnerability performance and risk reduction.
*Support the evolution of Microsoft Defender TVM across the business.


We’re looking for someone with:
*Strong hands-on experience with Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management (TVM).
*Experience producing executive-level reporting and presenting vulnerability data to senior stakeholders.
*A background in developing or improving vulnerability management strategies, frameworks or operating models.
*Strong knowledge of Microsoft security technologies.
*Experience using KQL to interrogate and report on security data.
*Excellent stakeholder management and communication skills.
*Previous experience within a regulated environment would be advantageous.


If you’ve led vulnerability management initiatives centred around Microsoft Defender TVM and enjoy building strategy, reporting and governance-not just running scans-we’d love to hear from you.