Group Threat & Vulnerability Manager

Company Description

From the fun of Mecca Bingo to the experience of Grosvenor Casinos, from in-person to online, from local to global, players love the experiences our famous brands deliver. This is such an exciting sector to be part of, bringing entertainment to millions in a culture of opportunity and growth.  

Look at our careers site to find out more: https://careers.rank.com/ 

Job Description

Rank Group is seeking a Cyber Security Threat & Vulnerability Manager to lead our vulnerability management and threat intelligence programme across the Group. You will identify, track and communicate threats and vulnerabilities that could affect Rank Group, our customers or colleagues, and ensure our security posture meets compliance and audit requirements.

Responsibilities:

• Manage and develop a team of vulnerability analysts responsible for vulnerability scanning (systems, containers, applications), penetration test results and baseline security compliance checks.
• Own and execute the vulnerability management roadmap, processes and supporting technologies across the Group.
• Lead threat intelligence activities, providing actionable insights on emerging threats and recommending controls to reduce business impact.
• Partner with senior management to define long‑term strategy, annual plans and tactical activities for vulnerability assessment and threat intelligence.
• Establish and maintain industry‑standard processes, standards and guidelines for vulnerability management, compliance and penetration testing.
• Oversee the full vulnerability lifecycle from identification to remediation and verification, escalating where necessary.
• Produce monthly KRIs and KPIs that demonstrate vulnerability risk, remediation progress and programme effectiveness.
• Build sustainable stakeholder relationships to drive adoption of the programme across business units.
• Provide leadership and direction to the business on vulnerability and threat matters.
• Perform other reasonable duties as requested by your line manager.

Qualifications

• Proven experience leading vulnerability management and/or threat intelligence programmes.
• Experience managing teams of analysts and coordinating cross‑functional security activity.
• Strong technical understanding of vulnerability scanning, penetration testing, container and application security and remediation workflows.
• Track record of developing and implementing security roadmaps, standards and compliance controls.
• Excellent stakeholder management, communication and escalation skills.
• Comfortable producing and presenting metrics (KRIs/KPIs) to demonstrate risk and progress.
• Relevant certifications desirable (e.g., CISSP, OSCP, CREST, CISM) but not essential

Additional Information

#LI-IZ1 #LI-Hybrid

Join us to unlock benefits and opportunities that will boost your career journey in a vibrant, inclusive and fulfilling work environment – so you can #BeYourself

Wellbeing@Rank is important... From hybrid working and colleague support networks to menopause support and weekly PepTalks, we’re here for you.  

We’ll also invest in your growth by providing development opportunities, leadership training and cutting-edge industry certifications so you have the tools and resources to help you work, win and grow with us. 

Immerse yourself in new cultures and gain international exposure through our global business. Collaborate with colleagues from around the globe.  

From pensions to bonus schemes, and private medical insurance to life insurance – we've got you covered. 

*Our benefits vary by brand and/or location. Please have a chat with your local Talent Acquisition specialist to find out what’s in place in your location.  

The Rank Group are committed to being an inclusive employer, ensuring that we better understand and meet the needs and requirements of our candidates and customers. 

We aim to do this by facilitating fair and equal access to our services. If you require a reasonable adjustment to be made, please reach out to let us know ahead of your interview.