Senior Manager, Security Threat, Vulnerability and Testing

• Own and evolve SEFE’s enterprise threat intelligence capability, providing insight into emerging threats, threat actors, attack techniques, and risks across cyber, OT, physical, and people security domains.
• Lead the organisation’s threat modelling framework, partnering with domain teams to identify attack paths, assess risks, and deliver enterprise-wide visibility of systemic vulnerabilities and emerging threats.
• Drive the end-to-end vulnerability management lifecycle, ensuring effective discovery, risk-based prioritisation, remediation tracking, and governance across applications, infrastructure, cloud, endpoints, and OT environments.
• Deliver and oversee the security testing programme, including penetration testing, scenario-based exercises, control assurance activities, and cross-domain security assessments that strengthen organisational resilience.
• Collaborate closely with Security Operations, GRC, Business Resilience, and other security functions to ensure threat intelligence, security testing outcomes, and vulnerability insights directly inform detection, response, and risk management activities.
• Lead continuous improvement initiatives that strengthen security maturity, enhance assurance capabilities, improve threat visibility, and reduce organisational exposure to both emerging and persistent threats.

• Proven experience leading threat intelligence, vulnerability management, threat hunting, security testing, or security assurance functions within complex enterprise environments.
• Strong understanding of threat actors, attack methodologies, and security risks across cyber, operational technology (OT), physical security, and insider threat domains.
• Experience developing and operating enterprise security programmes, including threat modelling, vulnerability management, penetration testing, and proactive threat detection capabilities.
• Ability to translate complex technical findings into clear, risk-based insights that support business decision-making and executive-level understanding.
• Strong stakeholder management and collaboration skills, with experience working across security, technology, operational, and business teams as well as managing external security partners and service providers.
• Analytical, pragmatic, and outcome-focused approach, with the credibility to influence senior stakeholders and drive security improvements through partnership and leadership.

SEFE is an international energy company anchored in Europe, delivering energy solutions that ensure reliable and affordable supply. Our activities span the entire energy value chain - from origination and trading to sales, transport and storage. With decades of trading expertise and a growing LNG portfolio, SEFE is one of Europe’s leading suppliers to industrial customers, providing more than 200 TWh of gas and power each year. We supply over 50,000 clients, from small businesses to municipalities and multinational organisations. By investing in clean energies, we support our customers on their decarbonisation journey and contribute to the energy transition. SEFE employs over 2,000 people worldwide and is owned by the Federal Government of Germany.