Senior Security Analyst – Vulnerability Response

Advanced Resource Managers Ltd; Greater London; Hybrid; GBP 101,000 - 157,000; Full time

Job summary

Advanced Resource Managers Ltd. seeks a Senior Security Analyst to lead the vulnerability response capability, coordinating remediation across infrastructure, cloud and applications, and ensuring governance, policy compliance and remediation SLAs.

London-based, hybrid working 1–2 days on-site; this 6-month Inside IR35 contract in the banking sector requires substantial experience in vulnerability management and security operations to prioritise and drive remediation of high-risk findings.

Qualifications

• Significant experience in Vulnerability Management, Cyber Security Operations or Cyber Defence.
• Experience leading remediation programmes across large enterprise environments.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory and security frameworks including: NIST SP 800-40, DORA, FCA/PRA requirements.

Responsibilities

• Manage the end-to-end vulnerability response lifecycle.
• Prioritise vulnerabilities based on severity, exploitability, business criticality and threat intelligence.
• Lead and manage vulnerability remediation activities across technology teams.
• Ensure critical and high-risk vulnerabilities are remediated within agreed SLAs.
• Drive accelerated response for actively exploited and zero-day vulnerabilities.
• Produce management information and executive reporting.

Skills

Vulnerability management

Cyber security operations

Cyber defence

Remediation governance

Job description

Senior Security Analyst - Vulnerability Response

6-Month contract - Inside IR35 - market rate

London based - hybrid working - 1-2 days a week onsite

Banking sector - must have previous experience in this sector

The role will lead the organisation's vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritised, remediated and governed. They will coordinate remediation efforts across infrastructure, cloud, application and wider technology teams, while ensuring compliance with internal policies, regulatory requirements and remediation SLAs.

Key responsibilities:

• Manage the end-to-end vulnerability response lifecycle.
• Prioritise vulnerabilities based on severity, exploitability, business criticality and threat intelligence.
• Lead and manage vulnerability remediation activities across technology teams.
• Ensure critical and high-risk vulnerabilities are remediated within agreed SLAs.
• Drive accelerated response for actively exploited and zero-day vulnerabilities.
• Produce management information and executive reporting.

Required experience / skills:

• Significant experience in Vulnerability Management, Cyber Security Operations or Cyber Defence.
• Experience leading remediation programmes across large enterprise environments.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory and security frameworks including:
• NIST SP 800-40
• DORA
• FCA/PRA requirements