Hybrid Vulnerability Management Lead - Security Operations

Capgemini; Inverness; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Learning for life

Wellbeing programs

Job summary

Capgemini is seeking a Vulnerability Manager to join our Cyber Delivery Team in the UK, based in Inverness or Preston. You will own end-to-end vulnerability management, coordinating across security governance and multi-supplier environments to protect client information assets.

This hybrid role requires hands-on expertise with vulnerability tools (Tenable and related tooling), strong stakeholder communication, and the ability to deliver executive reporting on risk posture and remediation

Qualifications

• Significant experience in Vulnerability Management, Cyber Governance, Security Operations Governance, or GRC roles within complex enterprise environments.
• Strong understanding of the vulnerability management lifecycle, risk-based remediation, and security governance frameworks.
• Proven ability to operate across multi-supplier environments, providing governance, assurance, and supplier challenge.
• Excellent stakeholder management and communication skills, with experience presenting security risk to senior leaders.
• Knowledge of frameworks such as NIST CSF, NCSC guidance, ISO 27001 and Secure by Design in regulated sectors.

Responsibilities

• Own and govern the end-to-end vulnerability management framework, ensuring alignment with security policies and remediation timelines.
• Lead supplier governance and performance management with consistent reporting and escalation of high-risk issues.
• Oversee vulnerability risk prioritisation using CVSS, EPSS, KEV and business criticality.
• Deliver consolidated reporting and executive insights on vulnerability posture and remediation progress.
• Ensure end-to-end traceability and audit readiness while driving continuous improvement.

Skills

Vulnerability Management

Security Governance

GRC

Stakeholder Management

NIST CSF

ISO 27001

CVSS/EPSS

Tools

Tenable

Qualys

Brinqa

Job description

Capgemini is seeking a Vulnerability Manager to join our Cyber Delivery Team in the UK, based in Inverness or Preston. You will own end-to-end vulnerability management, coordinating across security governance and multi-supplier environments to protect client information assets.

This hybrid role requires hands-on expertise with vulnerability tools (Tenable and related tooling), strong stakeholder communication, and the ability to deliver executive reporting on risk posture and remediation