Wood Mackenzie is the global data and analytics business for the renewables, energy, and natural resources industries. Enhanced by technology. Enriched by human intelligence. In an ever-changing world, companies and governments need reliable and actionable insight to lead the transition to a sustainable future. That’s why we cover the entire supply chain with unparalleled breadth and depth, backed by over 50 years’ experience. Our team of over 2,400 experts, operating across 30 global locations, are enabling customers’ decisions through real-time analytics, consultancy, events and thought leadership. Together, we deliver the insight they need to separate risk from opportunity and make confident decisions when it matters most.<a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>We are seeking a highly experienced and proactive Senior Vulnerability and Threat Management Specialist to lead and mature our organization's vulnerability management program. This role will be primarily responsible for the operational and strategic use of Tenable.io and/or Tenable.sc, ensuring continuous visibility into cyber risk exposure, driving remediation efforts, and providing threat context to vulnerability data.This individual will work cross-functionally with IT, Security Operations, DevSecOps, and Risk teams to reduce our attack surface and meet compliance and security objectives.Key Responsibilities<ul><li>Lead the design, implementation, and optimization of the vulnerability management lifecycle using Tenable.io, Tenable.sc, Nessus, and related tools.</li><li>Perform regular internal and external vulnerability scans across on-premise, cloud, container, and hybrid environments.</li><li>Analyse scan results and coordinate remediation efforts with system owners and application teams.</li><li>Develop and maintain metrics, dashboards, and reports that clearly communicate risk posture, trends, and remediation progress.</li><li>Integrate Tenable with other platforms (e.g., ServiceNow, Splunk, Azure, AWS) to enhance automation and reporting.</li><li>Continuously evaluate threat intelligence feeds to contextualize and prioritize vulnerabilities based on real-world exploitability.</li><li>Partner with IT and security teams to validate patch and configuration compliance.</li><li>Perform risk assessments on new systems and applications, identifying potential vulnerabilities and providing mitigation recommendations.</li><li>Maintain asset inventory and ensure proper scoping of scans in dynamic environments.</li><li>Develop and enforce policies, standards, and procedures for vulnerability management.</li><li>Stay informed on evolving threats, CVEs, and emerging vulnerabilities that may impact the organization.</li></ul>Required Qualifications<ul><li>5+ years of experience in cybersecurity with a focus on vulnerability management and threat analysis.</li><li>Strong hands-on experience with Tenable.io, Tenable.sc, Nessus Professional, and associated modules (e.g., Lumin, WAS).</li><li>Proven ability to interpret vulnerability data and CVSS scores and translate them into risk-based prioritization.</li><li>Experience with asset tagging, segmentation, and scan tuning in Tenable for large, complex environments.</li><li>Familiarity with integrating Tenable data into SIEMs, ticketing systems, or CMDBs.</li><li>Strong understanding of operating systems (Windows, Linux), networking, cloud platforms (Azure, AWS), and containers.</li><li>Knowledge of industry standards and frameworks such as NIST CSF, NIST 800-53, CIS Controls, and MITRE ATT\&amp;CK.</li><li>Strong verbal and written communication skills; capable of delivering reports and recommendations to both technical and executive audiences.</li></ul>Preferred Qualifications<ul><li>Tenable certifications (e.g., Tenable Certified Assessor or Tenable Certified Engineer)</li><li>Experience with ServiceNow Vulnerability Response or similar workflow automation tools.</li><li>Scripting skills (Python, PowerShell, or Bash) for automation and tool integration.</li><li>Experience with secure configuration benchmarks (CIS, STIGs).</li><li>Exposure to threat intelligence platforms and risk-based vulnerability management strategies.</li></ul>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a> If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.

In the middle of the energy transition, businesses and governments are faced with significant challenges. But the pace and scale of change mean every decision is made&nbsp;under mounting pressure.&nbsp; Now, more than ever, companies need reliable data, analytics and actionable insight. Wood Mackenzie is the&nbsp;leading global provider of data and analytics solutions&nbsp;for the renewables, energy and natural resources sectors . Wood Mackenzie&rsquo;s services&nbsp;include data, analytics, insight, events and consultancy.&nbsp; A trusted partner for over 50 years, Wood Mackenzie&rsquo;s team has over 2,300 experts across more than 30 global&nbsp;locations who cover the entire supply chain. Wood Mackenzie&rsquo;s data and analytics empowers energy producers, governments and financial institutions to be confident in&nbsp;their investment decisions in the face of rapidly evolving markets. Part of the Veritas group.

Cyber Security Threat Manager

Wood Mackenzie is the global data and analytics business for the renewables, energy, and natural resources industries. Enhanced by technology. Enriched by human intelligence. In an ever-changing world, companies and governments need reliable and actionable insight to lead the transition to a sustainable future. That’s why we cover the entire supply chain with unparalleled breadth and depth, backed by over 50 years’ experience. Our team of over 2,400 experts, operating across 30 global locations, are enabling customers’ decisions through real-time analytics, consultancy, events and thought leadership. Together, we deliver the insight they need to separate risk from opportunity and make confident decisions when it matters most.<a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>We are seeking a highly experienced and proactive Senior Vulnerability and Threat Management Specialist to lead and mature our organization's vulnerability management program. This role will be primarily responsible for the operational and strategic use of Tenable.io and/or Tenable.sc, ensuring continuous visibility into cyber risk exposure, driving remediation efforts, and providing threat context to vulnerability data.This individual will work cross-functionally with IT, Security Operations, DevSecOps, and Risk teams to reduce our attack surface and meet compliance and security objectives.Key Responsibilities<ul><li>Lead the design, implementation, and optimization of the vulnerability management lifecycle using Tenable.io, Tenable.sc, Nessus, and related tools.</li><li>Perform regular internal and external vulnerability scans across on-premise, cloud, container, and hybrid environments.</li><li>Analyse scan results and coordinate remediation efforts with system owners and application teams.</li><li>Develop and maintain metrics, dashboards, and reports that clearly communicate risk posture, trends, and remediation progress.</li><li>Integrate Tenable with other platforms (e.g., ServiceNow, Splunk, Azure, AWS) to enhance automation and reporting.</li><li>Continuously evaluate threat intelligence feeds to contextualize and prioritize vulnerabilities based on real-world exploitability.</li><li>Partner with IT and security teams to validate patch and configuration compliance.</li><li>Perform risk assessments on new systems and applications, identifying potential vulnerabilities and providing mitigation recommendations.</li><li>Maintain asset inventory and ensure proper scoping of scans in dynamic environments.</li><li>Develop and enforce policies, standards, and procedures for vulnerability management.</li><li>Stay informed on evolving threats, CVEs, and emerging vulnerabilities that may impact the organization.</li></ul>Required Qualifications<ul><li>5+ years of experience in cybersecurity with a focus on vulnerability management and threat analysis.</li><li>Strong hands-on experience with Tenable.io, Tenable.sc, Nessus Professional, and associated modules (e.g., Lumin, WAS).</li><li>Proven ability to interpret vulnerability data and CVSS scores and translate them into risk-based prioritization.</li><li>Experience with asset tagging, segmentation, and scan tuning in Tenable for large, complex environments.</li><li>Familiarity with integrating Tenable data into SIEMs, ticketing systems, or CMDBs.</li><li>Strong understanding of operating systems (Windows, Linux), networking, cloud platforms (Azure, AWS), and containers.</li><li>Knowledge of industry standards and frameworks such as NIST CSF, NIST 800-53, CIS Controls, and MITRE ATT\&amp;CK.</li><li>Strong verbal and written communication skills; capable of delivering reports and recommendations to both technical and executive audiences.</li></ul>Preferred Qualifications<ul><li>Tenable certifications (e.g., Tenable Certified Assessor or Tenable Certified Engineer)</li><li>Experience with ServiceNow Vulnerability Response or similar workflow automation tools.</li><li>Scripting skills (Python, PowerShell, or Bash) for automation and tool integration.</li><li>Experience with secure configuration benchmarks (CIS, STIGs).</li><li>Exposure to threat intelligence platforms and risk-based vulnerability management strategies.</li></ul>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a>&nbsp;If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.&nbsp;&nbsp;

Cyber Security Threat Manager

About the Job

About the Company

Wood Mackenzie

Similar Jobs

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Lead Cybersecurity Engineer

Lead Cybersecurity Engineer

Sr. SOC Analyst – Cyber Threat Intelligence

Sr. SOC Analyst – Cyber Threat Intelligence

Third Party Cyber Risk Manager

Third Party Cyber Risk Manager

Chief Information Security Officer

Chief Information Security Officer

Cybersecurity Engineer (Systems)

Cybersecurity Engineer (Systems)

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Staff Threat Intelligence Researcher

Staff Threat Intelligence Researcher