Senior Vulnerability Management Lead (Hybrid)

UK Home Office; Sheffield; Hybrid; GBP 50,000 - 57,000; Full time

Benefits offered by this job

Civil Service Pension

25 days annual leave

Hybrid work model

Job summary

UK Home Office is seeking a Vulnerability Management professional to lead identification, triage, and remediation across a complex IT environment. The role focuses on evaluating vulnerability scans, prioritising actions, and advising on mitigations with cross-functional teams.

You will join a skilled cyber security group and contribute to protecting critical digital infrastructure while benefiting from a supportive culture and ongoing development opportunities.

Qualifications

• Experience leading vulnerability management practices and improving processes.
• Ability to interpret vulnerability scans and prioritise remediation.
• Experience with vulnerability tooling and data-driven risk reporting.
• Collaborative work with security, tech teams and stakeholders.
• Excellent communication of complex risk to technical and non-technical audiences.
• Experience coordinating incident response in fast-paced environments.

Responsibilities

• Lead vulnerability identification across systems, apps and networks.
• Analyze scan results and assess severity and risk.
• Propose remediation plans and configuration changes.
• Create and present reports on assessments and remediation efforts.
• Coordinate with security teams to manage prioritised vulnerabilities.
• Oversee tooling use and continuous monitoring for new risks.

Skills

Vulnerability mgmt processes

Vulnerability assessment tools

Risk assessment & prioritisation

Incident response coordination

Clear written/verbal reporting

Stakeholder engagement

Job description

UK Home Office is seeking a Vulnerability Management professional to lead identification, triage, and remediation across a complex IT environment. The role focuses on evaluating vulnerability scans, prioritising actions, and advising on mitigations with cross-functional teams.

You will join a skilled cyber security group and contribute to protecting critical digital infrastructure while benefiting from a supportive culture and ongoing development opportunities.