Senior Vulnerability Manager

The role of Vulnerability Management is to triage vulnerabilities by relevance and criticality to the organisation. Vulnerability Management then identify mitigations for those vulnerabilities and advise on implementing them. 

You’ll join an expert team of cyber professionals, committed to fighting cyber-attack across a complex network of systems. You’ll be aided by a supportive organisational culture, and a commitment to further your continuous development. 

Main Responsibilities

Your main day to day responsibilities will be:

• Vulnerability Identification – Lead the process of identifying and classifying technical vulnerabilities in systems, applications and networks to identify security weaknesses and potential risks. Utilise vulnerability management tools/technologies to identify, assess and report on vulnerabilities.
• Risk Assessment – Analyse and evaluate the results of vulnerability scans to determine the severity and potential impact of identified vulnerabilities, categorising them based on risk to assets and operations.
• Remediation Planning – Collaborate with multiple departments, technical teams and senior stakeholders to recommend remediation plans and complex configuration changes in support of vulnerability remediation.
• Reporting – Create and present detailed reports on vulnerability assessments, remediation efforts, and overall vulnerability management performance for stakeholders, management and technical teams.
• Incident Management – Work closely with other security teams and technical resolver groups to ensure comprehensive approach to managing prioritised vulnerabilities.
• Tool management - Knowledge and understanding of approaches and tooling used to perform vulnerability assessments against large and complex infrastructure. Implementing continuous monitoring processes to identify new vulnerabilities and assess the effectiveness of remediation efforts over time.
• Vulnerability Management Service - Onboard assets into the appropriate vulnerability management tooling in line with the Threat and Vulnerability Management Service. Ensure that all vulnerability management activities align with service polices, standards and procedures.