Vulnerability Governance Analyst (Cyber Essentials)

Methods; Newport; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Career development

Wellness program

Pension

Life assurance

Travel insurance

Volunteer time

Job summary

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-driven support across the end-to-end vulnerability lifecycle in a highly secure enterprise environment. You will coordinate remediation activities, validate coverage, and escalate compliance risks with infrastructure, service providers and security stakeholders.

This is a full-time onsite role in Newport, requiring active SC clearance and a focus on Cyber Essentials Plus governance, reporting and KPI

Qualifications

• Vulnerability management experience in a large enterprise or regulated setting.
• Hands-on with Tenable/Nessus and vulnerability scanners.
• Experience analysing, prioritising and tracking remediation programs.
• Understanding Cyber Essentials Plus and governance processes.

Responsibilities

• Execute and validate vulnerability scans using Tenable/Nessus.
• Verify scan coverage against CMDB and asset records.
• Prioritise and manage High/Critical vulnerabilities per Cyber Essentials Plus.
• Coordinate remediation ownership across teams and vendors.
• Raise and track remediation tickets using ITSM tools.
• Produce weekly vulnerability and compliance reports.
• Create dashboards using Splunk and Excel.
• Support governance meetings and monthly review cycles.

Skills

Vulnerability mgmt

Regulated environment

Stakeholder mgmt

Governance reporting

Tools

Nessus

Tenable Security Center

Remedy ITSM

Splunk

Job description

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-driven support across the end-to-end vulnerability lifecycle in a highly secure enterprise environment. You will coordinate remediation activities, validate coverage, and escalate compliance risks with infrastructure, service providers and security stakeholders.

This is a full-time onsite role in Newport, requiring active SC clearance and a focus on Cyber Essentials Plus governance, reporting and KPI