Vulnerability Management Service Lead - Preston (Hybrid)

<p class="text-muted mb-3">Vulnerability Management Service Lead - Preston (Hybrid Working)</p>

<p class="text-muted mb-3">Salary: £75,000 + Bonus + Benefits</p>

<p class="text-muted mb-3">Security Clearance: Eligible for SC Clearance Required (SOLE BRITISH NATIONAL)</p>

<p class="text-muted mb-3">Lead Enterprise Vulnerability Management in a Complex, Security-Critical Environment</p>

<p class="text-muted mb-3">We're seeking an experienced Vulnerability Management Service Lead to take ownership of a mature vulnerability management capability within a highly regulated enterprise environment. As the Vulnerability Management Service Lead,</p>

<p class="text-muted mb-3">you will be responsible for owning and governing the end-to-end vulnerability management framework, ensuring effective risk management across complex technology estates.</p>

<p class="text-muted mb-3">Essential Experience</p>

<ul class="list-unstyled job-desc-list mb-3">

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Qualifications in Vulnerability Management tooling.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Experience using:</span></li>

</ul>

<p class="text-muted mb-3">o Qualys</p>

<p class="text-muted mb-3">o Brinqa</p>

<p class="text-muted mb-3">o Tenable</p>

<p class="text-muted mb-3">Responsibilities</p>

<p class="text-muted mb-3">Leading the enterprise vulnerability management service and governance framework</p>

<p class="text-muted mb-3">Driving vulnerability remediation activities through internal teams and third-party suppliers</p>

<p class="text-muted mb-3">Establishing and maintaining vulnerability reporting, metrics, KPIs and executive dashboards</p>

<p class="text-muted mb-3">Prioritising vulnerabilities using risk-based methodologies including CVSS, EPSS, Known Exploited Vulnerabilities (KEV), and business criticality</p>

<p class="text-muted mb-3">Managing exception processes, remediation timelines, and security risk governance</p>

<p class="text-muted mb-3">Providing assurance, oversight, and challenge across a multi-supplier service environment</p>

<p class="text-muted mb-3">Presenting vulnerability trends, risk exposure, and remediation performance to senior stakeholders</p>

<p class="text-muted mb-3">Ensuring audit readiness, evidence management, and compliance alignment</p>

<p class="text-muted mb-3">Identifying opportunities for process improvement, automation, and service maturity enhancement</p>