Senior Vulnerability & Exposure Lead - Hybrid

Bupa; Staines-upon-Thames; Hybrid; GBP 58,000 - 70,000; Full time

Benefits offered by this job

25 days holiday

Wellbeing programme

Pension

Employee discounts

Job summary

Bupa is seeking a Senior Exposure Management Analyst to operate and continuously improve vulnerability and exposure management across our environments. Hybrid working with 2 days in office, salary from £64,000 per year negotiable with experience.

You will consolidate security data, assess risks, and drive remediation across infrastructure, applications and cloud platforms while mentoring teammates and delivering clear updates to leadership.

Qualifications

• Security+ certification required or strongly preferred.
• Hands-on experience with vulnerability and exposure management tooling.
• Cloud security and exposure management experience.
• Ability to interpret CVEs, CVSS and threat intel for risk prioritisation.
• Knowledge of penetration testing, Breach and Attack simulations and Red Team findings.
• Strong stakeholder engagement skills and remediation leadership.
• Experience mentoring or supporting colleagues to build capability.

Responsibilities

• Operate and improve vulnerability and exposure management processes.
• Consolidate security data into dashboards and reports.
• Assess vulnerabilities in business risk context for prioritisation.
• Prioritise findings from scanners, tests and cloud data sources.
• Drive remediation with IT, cloud and business teams to closure.
• Provide guidance and mentoring to analysts and colleagues.
• Prepare updates and evidence packs for risk forums and leadership.
• Plan scanning, remediation tracking and reporting to meet SLAs.

Skills

Security+

Vulnerability mgmt

Cloud security

CVEs/CVSS interpretation

Penetration testing

Stakeholder engagement

Mentoring

Job description

Bupa is seeking a Senior Exposure Management Analyst to operate and continuously improve vulnerability and exposure management across our environments. Hybrid working with 2 days in office, salary from £64,000 per year negotiable with experience.

You will consolidate security data, assess risks, and drive remediation across infrastructure, applications and cloud platforms while mentoring teammates and delivering clear updates to leadership.