We're looking for an experienced Vulnerability & Exposure Manager to lead and mature our vulnerability management capability.
As a leading UK life and pensions mutual insurer with a proud history dating back to 1843, we exist to help people live financially confident lives – protecting their income while they work and maximising it when they stop. Today, over one million members and customers trust us to look after their futures, families and finances.
Joining us means becoming part of a team that puts our members, customers and advisers at the heart of everything we do.
We’re committed to creating an inclusive culture where colleagues can thrive. We are proud to have built a workplace where our colleagues feel welcomed, respected, supported and valued – reflected in our recognition as one of the Financial Times UK’s Best Employers in 2025 and 2026.
We celebrate individuality and believe our differences make us stronger, so bring your true self and help shape the future of LV=.
This is a highly visible role responsible for identifying, prioritising and driving the remediation of vulnerabilities across infrastructure, cloud platforms, applications, containers and third-party services.
Working closely with Security Operations, Cloud Engineering, Platform Teams, Development Teams, Architecture and Technology leadership, you'll ensure that cyber risks are understood, prioritised and reduced through effective governance, intelligence-led decision making and strong stakeholder engagement.
This is an excellent opportunity for someone who enjoys combining technical expertise, data-driven analysis and influencing skills to deliver measurable security outcomes.
The role follows a hybrid working pattern, with regular attendance required at our Bournemouth office.
Key Responsibilities
- Lead the organisation's end-to-end vulnerability management programme.
- Manage vulnerability scanning, analysis, prioritisation, reporting and remediation governance.
- Drive risk-based remediation using threat intelligence, exploitability data and business context.
- Partner with technology teams to reduce exposure across cloud, infrastructure, applications and endpoints.
- Maintain and optimise vulnerability management tooling and asset coverage.
- Produce executive-level reporting, dashboards and KPI metrics demonstrating risk reduction and programme effectiveness.
- Escalate high-risk or overdue vulnerabilities and influence remediation priorities.
- Identify systemic weaknesses and recommend strategic improvements to security architecture and operating practices.
- Support continuous improvement through automation, integration and enhanced asset visibility.
About You
You'll be comfortable operating at both a technical and strategic level, translating complex vulnerability data into clear risk-based actions.
Essential Experience
- Proven experience in vulnerability management, security operations or security engineering
- Hands-on experience with vulnerability scanning platforms and remediation workflows
- Strong understanding of CVEs, CVSS, exploitability, patch management and security configuration practices
- Experience working with cloud technologies, modern infrastructure and enterprise applications
- Ability to analyse large datasets and identify trends, risks and systemic issues
- Strong stakeholder management skills with the confidence to challenge constructively and drive action
- Experience producing reports and presentations for senior stakeholders
Technical Knowledge
Experience with some of the following:
- Vulnerability platforms such as Rapid7, Tenable, Qualys or Microsoft Defender TVM
- Azure cloud environments
- Endpoint and patch management technologies
- SIEM, EDR and threat intelligence platforms
- Security tools supporting application and container security
- ITSM, ticketing and reporting solutions such as ServiceNow, Jira or Power BI
Desirable Certifications
- CompTIA Security+ or CySA+
- GIAC certifications (GSEC, GCIH, GSTRT)
- Microsoft SC-200 and/or AZ-500
- Tenable, Qualys or Rapid7 certifications
- ITIL Foundation
Rewards and Benefits
At LV= Savings and Retirement, you’ll go above and beyond to do the right thing for our customers. We’ll reward your hard work with an attractive, competitive salary and benefits package, which includes:
- 30 days' holiday, with the option to buy up to 5 additional days
- Competitive pension scheme - LV= Life and Pensions will double-match the amount you pay, up to 14% (subject to National Minimum Wage requirements)
- An annual bonus scheme based on personal performance
- Single-cover private medical insurance (with the option for you to upgrade to family cover)
- Flexible benefits, including a cycle to work scheme, personal accident insurance, critical illness cover and dental insurance
- Up to 20% discount on our life products for you and your immediate family
- A group life assurance policy with 4 x your basic pay to go to your dependents (you’ll have the option to increase to 8 x cover)
- Group Income Protection (if you become a member of the Pension scheme and reach 5 years of service)
- Access to our Employee Assistance Programme (EAP) for support when you need it
- A virtual GP service
- Shared parental leave
- Up to 20% discount on our life products for you and your immediate family.
Please note that we are unable to offer Skilled Worker Visa Sponsorship for this role. Therefore, you must ensure that you are eligible to work in the UK without our sponsorship for your application to be considered.
We’re proud of our inclusive culture at LV= and, as an equal-opportunity employer, we continually work to remove unconscious bias from our recruitment process. We value our colleagues for what they bring to our team regardless of any protected status or characteristics they may have. Talk to us about flexible working as part of your application; if it’s right for you, our members and customers, and our business, then we’ll do everything we can to make it happen.
