Cyber Threat Intelligence & Vulnerability Management Lead

Cyber Threat
Intelligence & Vulnerability Management Lead
Flexible location
Hybrid working
Permanent, full time

Closing date: Monday 3rd November 2025

Who we are

We’re not just talking about making a difference, we’re making it happen.
We generate dispatchable, renewable power and create stable energy in an
uncertain world. Building on our proud heritage, we have ambition to become the
global leader in sustainable biomass and carbon removals.

You’ll be joining our teams of practical doers, future thinkers and business
champions. We’re enabling a zero carbon, lower cost energy future for all, and
working hard to decarbonise the planet for generations to come.

About the role

The primary purpose of this role is to manage and influence all aspects of
Cyber Threat Intelligence and Vulnerability Management, but particularly in the
development of the threat landscape to Drax. You’ll also assist in the
development of Technical Controls in accordance with policy, standards and
regulatory requirements.

You’ll help to develop and support senior management with the technical
controls and cyber threat intelligence skills within the group-wide security
team and through the rollout of tools, technical controls, policies and
procedures, and coaching and mentoring. The role will also have responsibility
for working with asset owners to ensure that they understand their
responsibilities regarding risk and technical security controls.

You’ll deliver against the business strategy, the technical roadmap and
objectives set out in the Security strategy – covering group wide security
requirements.

Additional responsibilities include:

• Supporting the definition of technical controls matrices, Security Operations
  Centre (SOC) processes, industrial control matrices and architectural controls,
  providing oversight to other SMEs in support of their BAU activities and
  maintaining accurate documentation and record keeping.
  
• Ensuring controls and risk treatment plans align with our policies and
  standards.
  
• Leading threat intelligence and vulnerability management review meetings with
  key stakeholders and provision of security representation at business unit
  technical review and Senior Leadership Team (SLT) meetings as required.
  Effectively communicating all technical controls and mitigations.
  
• Continuing to develop and improve the Group Cyber Threat Intelligence
  framework technical controls, industrial controls and architectural controls
  including the effective management of the required documentation across the
  Group.
  
• Recommending and implementing an appropriate toolkit for Cyber Threat
  Intelligence.
  
• Technical control reporting.
  
• Researching threats, Indicators of Compromise (IoCs) and threat actor Tactics,Techniques and Procedures (TTPs) to support Threat Hunting, Signature
  Development and Threat Intelligence Platform (TIP) processes.
  
• Providing strong technical oversight to deliver consistency and quality in
  technical work across the Group.
  
• Participating in Audits, Technical Design Authority and Change Advisory
  Boards as required.
  
  Who we’re looking for
  
  This role requires the ability to interpret Cyber Threat Intelligence and
  technical controls and communicate effectively to all levels of the
  organisation.
  
  Ideally, you’ll have a good experience working within IT/OT in an operational
  or corporate environment with a good knowledge of control frameworks such as
  ISO27001, ITIL (Information Technology Infrastructure Library), NIST, SABSA and
  IEC 62443 and cyber kill chain.
  
  You’ll have a good knowledge of Risk Management Methodologies such as ISO27005
  and IRAM2/security frameworks NIST/NIS CAF/IEC/SoGp Cyber Kill chain with
  strong IT technical skills to support this knowledge.
  
  You’ll also demonstrate strong communication (verbal and written) and
  stakeholder management skills, with the ability to take the initiative and
  handle multiple projects simultaneously.
  
  Rewards and benefits
  
  As you help us to shape the future, we’ve shaped our rewards and benefits to help you thrive and support your lifestyle:
  
  
• Competitive salary
  
• Discretionary group performance-based bonus
  
• 25 days annual leave (plus Bank Holidays)
  
• Single cover private medical insurance
  
• Pension scheme
  
  We’re committed to making a tangible impact on the climate challenge we all face. Drax is where your individual purpose can work alongside your career drive. We work as part of a team that shares a passion for doing what’s right for the future. With Drax you can shape your career and a future for generations to come.
  
  Together, we make it happen.
  
  At Drax, we’re committed to fostering an environment where everyone feels valued and respected, regardless of their role. To make this a reality, we actively work to better represent the communities we operate in, foster inclusion, and establish fair processes. Through these actions, we build the trust needed for all colleagues at Drax to contribute their perspectives and talents, no matter their background. Find out more about our approach here.
  
  How to apply
  
  Think this role’s for you? Click the ‘Apply now’ button to begin your Drax journey.
  
  If you want to find out more about Drax, check out our LinkedIn page to see our latest news