Vulnerability Governance Analyst – SC Cleared (Onsite)

Methods; Newport; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

LinkedIn Learning access

Management development programme

Training

Employee assistance programme

Season ticket loan

Job summary

Methods is seeking an experienced Vulnerability Management Analyst to support the end-to-end vulnerability management lifecycle in a highly secure enterprise environment.

You will work with infrastructure teams, asset owners and security stakeholders to coordinate remediation, validate coverage and track progress, with governance and reporting at the core. Active SC Clearance and full-time onsite work are required.

Qualifications

• Proven vulnerability management experience in a large enterprise or regulated environment.
• Hands-on with Tenable/Nessus and related scanners.
• Experience analysing, prioritising and tracking remediation programmes.
• Understanding Cyber Essentials Plus and governance processes.
• Experience using CMDB and asset inventories to validate coverage.

Responsibilities

• Execute and validate vulnerability scans using Tenable/Nessus platforms.
• Verify scan coverage against CMDB and asset inventory records.
• Review, prioritise and manage Critical and High vulnerabilities.
• Coordinate remediation ownership across internal teams and service providers.
• Raise and track remediation tickets using Remedy or equivalent ITSM tools.
• Monitor remediation progress and maintain an audit trail of actions.

Skills

Vulnerability management

Governance & reporting

Stakeholder management

Cyber Essentials Plus

SC Clearance

Tools

Tenable Security Center

Nessus

Remedy ITSM

CMDB/asset inventory

Splunk

Job description

Methods is seeking an experienced Vulnerability Management Analyst to support the end-to-end vulnerability management lifecycle in a highly secure enterprise environment.

You will work with infrastructure teams, asset owners and security stakeholders to coordinate remediation, validate coverage and track progress, with governance and reporting at the core. Active SC Clearance and full-time onsite work are required.