Security Testing & Attack Surface Manager

Job description

General information Job Title Security Testing & Attack Surface Manager Ref # 9508 Location Edinburgh - 2 South Gyle Crescent, Edinburgh, EH12 9FQ, United Kingdom Department IMS - Information Technology Business Area Engineering Working time Full-Time Date Published 11-03-2026 Serving our customers, communities, and planet a little better every day. Salary - Between £76,400 - £114,600 + annual bonus & benefits Work Level – WL2 Location – Edinburgh, Glasgow or Newcastle. Permanent Office Attendance - Our roles are hybrid; however, you should be able to travel to our office, 1-3 days per week for this position. Closing Date - Applications close 25th March at 5pm We’re looking for a Security Testing & Attack Surface Manager (known internally as Lead Security Ops Manager) to join our Insurance Money and Services team. Lead the enterprise vulnerability management, penetration testing, and attack surface management (ASM) functions to proactively reduce cyber risk across technology estates (cloud, on-prem, endpoints, third-parties, and internet-facing assets). Own the end-to-end lifecycle from discovery to remediation, ensuring measurable risk reduction, regulatory compliance, and clear b...