Vulnerability Governance Analyst — SC Cleared, Onsite

Methods Business and Digital Technology; Newport; On-site; GBP 60,000 - 86,000; Full time

Benefits offered by this job

LinkedIn Learning

Management development programme

Employee assistance programme

Private medical insurance

Pension salary exchange

Job summary

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-focused support across the end-to-end vulnerability management lifecycle, ensuring Cyber Essentials Plus compliance within a secure enterprise environment. You will coordinate remediation ownership with infrastructure teams, service providers and stakeholders.

Working onsite in the UK, you will execute scans with Tenable/Nessus, validate coverage against CMDB, prioritise high and critical flaws, track

Qualifications

• Strong vulnerability management experience within a large enterprise or regulated environment.
• Hands-on experience with Tenable Security Center, Nessus and other vulnerability scanners.
• Experience analysing, prioritising and tracking remediation programmes.
• Good understanding of Cyber Essentials Plus requirements and vulnerability governance processes.
• Experience utilising CMDB platforms and asset inventories to validate coverage and identify ownership.
• Knowledge of ITSM and ticketing tools, ideally Remedy.
• Experience creating and maintaining Splunk dashboards and security reporting.

Responsibilities

• Execute and validate vulnerability scans using Tenable/Nessus platforms.
• Verify scan coverage against CMDB and asset inventory records.
• Review, prioritise and manage Critical and High vulnerabilities in line with Cyber Essentials Plus requirements.
• Coordinate remediation ownership across internal teams, managed service providers and third-party stakeholders.
• Raise, maintain and track vulnerability remediation tickets using Remedy or equivalent ITSM tools.
• Investigate unidentified asset ownership and resolve coverage gaps.
• Monitor remediation progress and maintain a clear audit trail of actions and communications.
• Escalate overdue vulnerabilities through established governance, risk acceptance and deviation processes.
• Produce weekly vulnerability management and compliance reports.
• Maintain KPI reporting covering ticket volumes, remediation performance and compliance metrics.
• Create and enhance reporting dashboards using Splunk and Excel.
• Provide updates and support during regular Cyber Essentials Plus governance meetings.
• Coordinate ongoing management of Medium and Low vulnerabilities through monthly review cycles.
• Engage with infrastructure, security and service delivery teams to drive remediation activity and maintain compliance.

Skills

Vulnerability management

Tenable Security Center

Nessus

Vulnerability scanners

CMDB

ITSM (Remedy)

Splunk dashboards

Tools

Remedy

Splunk

Job description

Methods is seeking an experienced Vulnerability Management Analyst to provide governance-focused support across the end-to-end vulnerability management lifecycle, ensuring Cyber Essentials Plus compliance within a secure enterprise environment. You will coordinate remediation ownership with infrastructure teams, service providers and stakeholders.

Working onsite in the UK, you will execute scans with Tenable/Nessus, validate coverage against CMDB, prioritise high and critical flaws, track