Hybrid Vulnerability Response Lead

Deutsche Bank AG; Birmingham; Hybrid; GBP 80,000 - 120,000; Full time

Benefits offered by this job

Hybrid Working model

Competitive salary and non-contributy?

Job summary

Deutsche Bank in Birmingham seeks a Vulnerability Response Manager to lead the organisation's vulnerability response and remediation of serious vulnerabilities, coordinating across infrastructure, cloud, application and technology teams while ensuring compliance with internal policies and regulatory requirements.

You will drive remediation within SLAs, prioritise based on severity and threat intelligence, report to senior stakeholders, and contribute to a broad security program through effective

Qualifications

• Significant experience in Vulnerability Management, Cyber Security Operations, or Cyber Defence.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework.
• Proven ability to leverage AI tools to enhance productivity while applying responsible and ethical use of data and AI outputs.

Responsibilities

• Managing the end-to-end serious vulnerability response and remediation lifecycle.
• Prioritising vulnerabilities based on severity, exploitability, business criticality, and threat intelligence.
• Leading and managing vulnerability remediation activities across global technology teams.
• Ensuring critical and high-risk vulnerabilities are remediated within agreed SLAs.
• Driving accelerated response activities for actively exploited and zero-day vulnerabilities.
• Producing management information and executive reporting.

Skills

Vulnerability management

Cyber security operations

Cyber defence

CVSS knowledge

Regulatory frameworks

AI in security

Job description

Deutsche Bank in Birmingham seeks a Vulnerability Response Manager to lead the organisation's vulnerability response and remediation of serious vulnerabilities, coordinating across infrastructure, cloud, application and technology teams while ensuring compliance with internal policies and regulatory requirements.

You will drive remediation within SLAs, prioritise based on severity and threat intelligence, report to senior stakeholders, and contribute to a broad security program through effective