Senior Security Analyst - Vulnerability Response

Arm; Greater London; Hybrid; GBP 101,000 - 129,000; Full time

Job summary

Arm is seeking a Senior Security Analyst to lead the organisation's vulnerability response capability in a London-based, hybrid role. The contract is 6 months Inside IR35 with a market-rate package and requires prior banking-sector experience.

The role will coordinate remediation across infrastructure, cloud, and applications, ensuring governance and compliance with internal policies and regulatory requirements.

Qualifications

• Significant experience in vulnerability management or cyber security operations.
• Experience leading remediation programmes across large enterprise environments.
• Strong understanding of vulnerability scoring (e.g., CVSS) and governance frameworks.

Responsibilities

• Manage end-to-end vulnerability response lifecycle.
• Prioritise vulnerabilities by severity, exploitability, and business impact.
• Lead remediation activities across technology teams.
• Ensure high-risk vulnerabilities are remediated within SLAs.
• Produce management information and executive reporting.

Skills

Vulnerability management

Cyber security operations

Cyber defence

Remediation governance

Regulatory awareness

Job description

Senior Security Analyst - Vulnerability Response

6-Month contract - Inside IR35 - market rate

London based - hybrid working - 1-2 days a week onsite

Banking sector - must have previous experience in this sector

The role will lead the organisation's vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritised, remediated and governed.

They will coordinate remediation efforts across infrastructure, cloud, application and wider technology teams, while ensuring compliance with internal policies, regulatory requirements and remediation SLAs.

Key responsibilities:

• Manage the end-to-end vulnerability response lifecycle.
• Prioritise vulnerabilities based on severity, exploitability, business criticality and threat intelligence.
• Lead and manage vulnerability remediation activities across technology teams.
• Ensure critical and high-risk vulnerabilities are remediated within agreed SLAs.
• Drive accelerated response for actively exploited and zero-day vulnerabilities.
• Produce management information and executive reporting.

Required experience / skills:

• Significant experience in Vulnerability Management, Cyber Security Operations or Cyber Defence.
• Experience leading remediation programmes across large enterprise environments.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory and security frameworks including:
• NIST SP 800-40
• DORA
• FCA/PRA requirements