Hybrid Vulnerability Management Lead

Supply Chain Corporation; Nottingham; Hybrid; GBP 52,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Annual bonus

Long service awards

Well-being leave

Pension scheme

Flexible benefits

Volunteer leave

NHS Discounts

Job summary

NHS Supply Chain is seeking a Cyber Security Manager to lead and continuously improve the Vulnerability Management Service, ensuring risks are identified, assessed and remediated across the technology estate.

In a hybrid role, you will oversee governance across multiple providers within a SIAM framework, driving accountability and regulatory compliance to protect critical services for NHS trusts and health organisations in England and Wales.

Qualifications

• Experience in vulnerability management leadership and governance.
• Ability to translate cyber risk to non-technical audiences.
• Strong reporting, stakeholder engagement and contract management.

Responsibilities

• Own and develop Vulnerability Management Strategy, Framework, Policies and Standards.
• Lead delivery and continuous improvement of vulnerability management capabilities.
• Drive governance across vulnerability identification, assessment, prioritisation, remediation, exception management and reporting.
• Act as Service Owner for Vulnerability Management within the SIAM model.
• Coordinate activities across multiple service providers to ensure remediation of vulnerabilities.
• Hold suppliers accountable for delivery against remediation targets and contractual obligations

Skills

Leadership

Supplier management

Risk assessment

Communicating cyber risks

Reporting

Accountability

Education

CISSP

CISM

CRISC

GIAC certification

ITIL Foundation

SIAM Foundation

ISO 27001 Lead Auditor/Lead Implementer

CAF knowledge

Job description

NHS Supply Chain is seeking a Cyber Security Manager to lead and continuously improve the Vulnerability Management Service, ensuring risks are identified, assessed and remediated across the technology estate.

In a hybrid role, you will oversee governance across multiple providers within a SIAM framework, driving accountability and regulatory compliance to protect critical services for NHS trusts and health organisations in England and Wales.