Senior Security Analyst - Vulnerability Response

ARM; City Of London; Hybrid; GBP 65,000 - 90,000; Part time

Job summary

ARM in London invites applications for a Senior Security Analyst to lead the vulnerability response function on a 6-month Inside IR35 contract, with hybrid working (1–2 days onsite) in theCity of London. Banking sector experience is essential.

The role drives end-to-end vulnerability identification, assessment and remediation, coordinating across infrastructure, cloud and applications while ensuring policy compliance and remediation SLAs.

Qualifications

• Significant experience in Vulnerability Management, Cyber Security Operations or Cyber Defence.
• Experience leading remediation programmes across large enterprise environments.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory and security frameworks including: NIST SP 800-40, DORA, FCA/PRA requirements.

Responsibilities

• Manage the end–to–end vulnerability response lifecycle.
• Prioritise vulnerabilities based on severity, exploitability, business criticality and threat intelligence.
• Lead and manage vulnerability remediation activities across technology teams.
• Ensure critical and high–risk vulnerabilities are remediated within agreed SLAs.
• Drive accelerated response for actively exploited and zero–day vulnerabilities.
• Produce management information and executive reporting.

Skills

Vulnerability Management

Cyber Security Operations

Cyber Defence

Job description

Senior Security Analyst – Vulnerability Response

6–Month contract – Inside IR35 – market rate

London based – hybrid working – 1–2 days a week onsite

Banking sector – must have previous experience in this sector

The role will lead the organisation's vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritised, remediated and governed. They will coordinate remediation efforts across infrastructure, cloud, application and wider technology teams, while ensuring compliance with internal policies, regulatory requirements and remediation SLAs.

Key responsibilities:

• Manage the end–to–end vulnerability response lifecycle.
• Prioritise vulnerabilities based on severity, exploitability, business criticality and threat intelligence.
• Lead and manage vulnerability remediation activities across technology teams.
• Ensure critical and high–risk vulnerabilities are remediated within agreed SLAs.
• Drive accelerated response for actively exploited and zero–day vulnerabilities.
• Produce management information and executive reporting.

Required experience / skills:

• Significant experience in Vulnerability Management, Cyber Security Operations or Cyber Defence.
• Experience leading remediation programmes across large enterprise environments.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory and security frameworks including:
• NIST SP 800–40
• DORA
• FCA/PRA requirements